id: GO-2025-3436
modules:
    - module: github.com/ethereum/go-ethereum
      versions:
        - introduced: 1.14.0
        - fixed: 1.14.13
      vulnerable_at: 1.14.12
summary: |-
    Go Ethereum vulnerable to DoS via malicious p2p message in
    github.com/ethereum/go-ethereum
cves:
    - CVE-2025-24883
ghsas:
    - GHSA-q26p-9cq4-7fc2
references:
    - advisory: https://github.com/ethereum/go-ethereum/security/advisories/GHSA-q26p-9cq4-7fc2
    - fix: https://github.com/ethereum/go-ethereum/commit/fa9a2ff8687ec9efe57b4b9833d5590d20f8a83f
source:
    id: GHSA-q26p-9cq4-7fc2
    created: 2025-02-04T13:47:22.888728-05:00
review_status: REVIEWED