{"action":"Upgrade github.com/ethereum/go-ethereum to 1.10.17 or later.","affected":[{"fixed":"1.10.17","introduced":"0"}],"component":"github.com/ethereum/go-ethereum","cve_ids":["CVE-2022-29177"],"ecosystem":"Go","epss":0.01155,"exploited":false,"fixed_versions":["1.10.17"],"ghsa_id":"GHSA-wjxw-gh3m-7pm5","id":"tcs_01M5KFQV6HPND1W4R8FN38N8MZ","modified_at":"2024-08-21T15:26:57.121560Z","published_at":"2022-05-24T20:54:55Z","references":["https://osv.dev/vulnerability/GHSA-wjxw-gh3m-7pm5","https://github.com/ethereum/go-ethereum/security/advisories/GHSA-wjxw-gh3m-7pm5","https://nvd.nist.gov/vuln/detail/CVE-2022-29177","https://github.com/ethereum/go-ethereum/pull/24507"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-wjxw-gh3m-7pm5","url":"https://osv.dev/vulnerability/GHSA-wjxw-gh3m-7pm5"}],"summary":"DoS via malicious p2p message in Go Ethereum"}