blob: 03fe9da69bbf22fca000ed61eeaa3af2fb941d1e [file] [log] [blame]
packages:
- module: github.com/ethereum/go-ethereum
package: github.com/ethereum/go-ethereum/les
symbols:
- protocolManager.handleMsg
versions:
- fixed: 1.8.11
description: |
Due to improper argument validation in RPC messages, a maliciously crafted
message can cause a panic, leading to denial of service.
published: 2021-04-14T20:04:52Z
cves:
- CVE-2018-12018
links:
pr: https://github.com/ethereum/go-ethereum/pull/16891
commit: https://github.com/ethereum/go-ethereum/commit/a5237a27eaf81946a3edb4fafe13ed6359d119e4
context:
- https://peckshield.com/2018/06/27/EPoD/