GHSA-wjxw-gh3m-7pm5
GitHub Security Advisory
DoS via malicious p2p message in Go Ethereum
Advisory Details
### Impact
A vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node.
### Patches
The following PR addresses the problem: https://github.com/ethereum/go-ethereum/pull/24507
### Workarounds
Aside from applying the PR linked above, setting loglevel to default level (`INFO`) makes the node not vulnerable to this attack.
### Credits
This bug was reported by `nrv` via [email protected], who has gracefully requested that the bounty rewards be donated to Médecins sans frontières.
### For more information
If you have any questions or comments about this advisory:
* Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum)
Affected Packages
Related CVEs
Key Information
Dataset
Data from GitHub Advisory Database. This information is provided for research and educational purposes.