Go Ethereum
Approved changes feed: RSS · Atom
cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ethereum (0b3cc527-ebd6-5ba8-b463-3587a81d29d7) |
|---|---|
| Product | Go Ethereum (95ef1297-277a-5f90-a699-ce59e6ca2af1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ethereum/go-ethereum |
purl2cpe | 2026-06-01 10:11:53.047517 |
pkg:opensuse/go-ethereum |
purl2cpe | 2026-06-01 10:11:53.047519 |
pkg:sourceforge/go-ethereum.mirror |
purl2cpe | 2026-06-01 10:11:53.047520 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-26315 |
vulnerable | 2026-06-08 07:53:21.498045 |
Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake
go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, through a flaw in the ECIES cryptography implementation, an attacker may be able to extract bits of the p2p node key. The issue is resolved in the v1.16.9 and v1.17.0 releases of Geth. Geth maintainers recommend rotating the node key after applying the upgrade, which can be done by removing the file `<datadir>/geth/nodekey` before starting Geth.
Published: 2026-02-19T21:22:41.188Z
Updated: 2026-02-20T15:42:16.395Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26314 |
vulnerable | 2026-06-08 07:53:21.497731 |
Go Ethereum affected by DoS via malicious p2p message
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, a vulnerable node can be forced to shutdown/crash using a specially crafted message. The problem is resolved in the v1.16.9 and v1.17.0 releases of Geth.
Published: 2026-02-19T21:15:11.752Z
Updated: 2026-02-20T15:42:28.197Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26313 |
vulnerable | 2026-06-08 07:53:21.497314 |
Go Ethereum affected by DoS via malicious p2p message
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an attacker can cause high memory usage by sending a specially-crafted p2p message. The issue is resolved in the v1.17.0 release.
Published: 2026-02-19T21:07:37.943Z
Updated: 2026-02-20T19:53:54.846Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22868 |
vulnerable | 2026-06-08 07:51:14.047538 |
go-ethereum has a DoS via malicious p2p message
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8.
Published: 2026-01-13T20:27:15.698Z
Updated: 2026-01-14T23:26:09.865Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22862 |
vulnerable | 2026-06-08 07:51:14.033789 |
go-ethereum has a DoS via malicious p2p message
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8.
Published: 2026-01-13T20:27:10.979Z
Updated: 2026-01-15T16:37:30.177Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42319 |
vulnerable | 2026-06-08 06:11:07.981102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40591 |
vulnerable | 2026-06-08 06:11:03.916137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37450 |
vulnerable | 2026-06-08 05:47:12.913478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29177 |
vulnerable | 2026-06-08 05:42:47.280379 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23327 |
vulnerable | 2026-06-08 05:40:56.988598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41173 |
vulnerable | 2026-06-08 05:35:19.901253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39137 |
vulnerable | 2026-06-08 05:33:48.940889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26265 |
vulnerable | 2026-06-08 05:23:51.035448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26264 |
vulnerable | 2026-06-08 05:23:51.034910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26242 |
vulnerable | 2026-06-08 05:23:50.947968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26241 |
vulnerable | 2026-06-08 05:23:50.947417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26240 |
vulnerable | 2026-06-08 05:23:50.946850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16733 |
vulnerable | 2026-06-08 05:11:05.375447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12018 |
vulnerable | 2026-06-08 05:10:39.716284 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.