| id: GO-2024-2819 |
| modules: |
| - module: github.com/ethereum/go-ethereum |
| versions: |
| - fixed: 1.13.15 |
| vulnerable_at: 1.13.14 |
| summary: Denial of Service in github.com/ethereum/go-ethereum |
| description: |- |
| A vulnerable node can be made to consume very large amounts of memory when |
| handling specially crafted p2p messages sent from an attacker node. This can |
| result in a denial of service as the node runs out of memory. |
| cves: |
| - CVE-2024-32972 |
| ghsas: |
| - GHSA-4xc9-8hmq-j652 |
| credits: |
| - DongHan Kim |
| references: |
| - advisory: https://github.com/advisories/GHSA-4xc9-8hmq-j652 |
| source: |
| id: GHSA-4xc9-8hmq-j652 |
| created: 2024-05-08T13:36:16.906049-07:00 |
| review_status: REVIEWED |
