Approved changes feed: RSS · Atom

cpe:2.3:a:ethereum:go_ethereum:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorEthereum (0b3cc527-ebd6-5ba8-b463-3587a81d29d7)
ProductGo Ethereum (95ef1297-277a-5f90-a699-ce59e6ca2af1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ethereum/go-ethereum purl2cpe 2026-06-01 10:11:53.047521
pkg:opensuse/go-ethereum purl2cpe 2026-06-01 10:11:53.047523
pkg:sourceforge/go-ethereum.mirror purl2cpe 2026-06-01 10:11:53.047524

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32972 vulnerable 2026-06-08 06:37:24.813017 go-ethereum denial of service via malicious p2p message
HIGH (7.5)
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version `1.13.15` and onwards.
Published: 2024-05-06T14:26:19.510Z
Updated: 2024-08-02T02:27:53.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23328 vulnerable 2026-06-08 05:40:56.990292 Details available
A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node's memory pool and then occupy the memory pool to prevent new transactions from entering the pool, resulting in a denial of service (DoS).
Published: 2022-03-04T11:24:22.000Z
Updated: 2024-08-03T03:36:20.422Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.