Approved changes feed: RSS · Atom

cpe:2.3:a:ethereum:go_ethereum:1.8.19:*:*:*:*:*:*:*

part: a version: 1.8.19 update: *

VendorEthereum (0b3cc527-ebd6-5ba8-b463-3587a81d29d7)
ProductGo Ethereum (95ef1297-277a-5f90-a699-ce59e6ca2af1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ethereum/go-ethereum purl2cpe 2026-06-01 10:11:53.048371
pkg:opensuse/go-ethereum purl2cpe 2026-06-01 10:11:53.048372
pkg:sourceforge/go-ethereum.mirror purl2cpe 2026-06-01 10:11:53.048374

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20421 vulnerable 2026-06-08 05:11:27.220328 Details available
Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }" followed by a "c[0xC800000] = 0xFF" assignment.
Published: 2018-12-24T03:00:00.000Z
Updated: 2024-09-17T01:41:26.479Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.