Vulnerability Report: GO-2021-0105

CVE-2020-26265, GHSA-xw37-57qp-9mm4
Affects: github.com/ethereum/go-ethereum
Published: Jul 28, 2021
Modified: Jun 12, 2023

Due to an incorrect state calculation, a specific set of transactions could cause a consensus disagreement, causing users of this package to reject a canonical chain.

Affected Packages

Path

Versions

Symbols
github.com/ethereum/go-ethereum/core/state

from v1.9.4 before v1.9.20
9 affected symbols

Aliases

CVE-2020-26265
GHSA-xw37-57qp-9mm4

References

https://github.com/ethereum/go-ethereum/pull/21080
https://github.com/ethereum/go-ethereum/commit/87c0ba92136a75db0ab2aba1046d4a9860375d6a
https://vuln.go.dev/ID/GO-2021-0105.json

Credits

John Youngseok Yang (Software Platform Lab)

Feedback

See anything missing or incorrect? Suggest an edit to this report.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL