Vulnerability Report: GO-2021-0063
- CVE-2020-26264, GHSA-r33q-22hv-j29q
- Affects: github.com/ethereum/go-ethereum
- Published: Apr 14, 2021
- Modified: Dec 14, 2023
Due to a nil pointer dereference, a maliciously crafted RPC message can cause a panic. If handling RPC messages from untrusted clients, this may be used as a denial of service vector.
Affected Packages
-
PathVersionsSymbols
-
before v1.9.25
Aliases
References
- https://github.com/ethereum/go-ethereum/pull/21896
- https://github.com/ethereum/go-ethereum/commit/bddd103a9f0af27ef533f04e06ea429cf76b6d46
- https://vuln.go.dev/ID/GO-2021-0063.json
Credits
- @zsfelfoldi
Feedback
See anything missing or incorrect?
Suggest an edit to this report.