CVE-2021-43668
Medium
Description
Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal.
SeverityMedium
CVSS5.5
Exploit probability—
ProductGo Ethereum
PublishedNov 18, 2021
First seenNov 18, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ethereum go_ethereum | 1.10.9 | — |
| github.com/ethereum/go-ethereumGo | v ≤ 1.10.9 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.