| module: github.com/ethereum/go-ethereum |
| package: github.com/ethereum/go-ethereum/les |
| versions: |
| - fixed: v1.8.11 |
| description: | |
| Due to improper argument validation in RPC messages, a maliciously crafted |
| message can cause a panic, leading to denial of service. |
| published: 2021-04-14T20:04:52Z |
| cves: |
| - CVE-2018-12018 |
| symbols: |
| - protocolManager.handleMsg |
| links: |
| pr: https://github.com/ethereum/go-ethereum/pull/16891 |
| commit: https://github.com/ethereum/go-ethereum/commit/a5237a27eaf81946a3edb4fafe13ed6359d119e4 |
| context: |
| - https://peckshield.com/2018/06/27/EPoD/ |
