CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40591

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version `1.12.1-stable`, i.e, `1.12.2-unstable` and onwards. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.1%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2023-40591

Ethereum » Go Ethereum » Version: 1.10.0

cpe:2.3:a:ethereum:go_ethereum:1.10.0
Ethereum » Go Ethereum » Version: 1.10.1

cpe:2.3:a:ethereum:go_ethereum:1.10.1
Ethereum » Go Ethereum » Version: 1.10.10

cpe:2.3:a:ethereum:go_ethereum:1.10.10
Ethereum » Go Ethereum » Version: 1.10.11

cpe:2.3:a:ethereum:go_ethereum:1.10.11
Ethereum » Go Ethereum » Version: 1.10.12

cpe:2.3:a:ethereum:go_ethereum:1.10.12
Ethereum » Go Ethereum » Version: 1.10.13

cpe:2.3:a:ethereum:go_ethereum:1.10.13
Ethereum » Go Ethereum » Version: 1.10.14

cpe:2.3:a:ethereum:go_ethereum:1.10.14
Ethereum » Go Ethereum » Version: 1.10.15

cpe:2.3:a:ethereum:go_ethereum:1.10.15
Ethereum » Go Ethereum » Version: 1.10.16

cpe:2.3:a:ethereum:go_ethereum:1.10.16
Ethereum » Go Ethereum » Version: 1.10.17

cpe:2.3:a:ethereum:go_ethereum:1.10.17
Ethereum » Go Ethereum » Version: 1.10.18

cpe:2.3:a:ethereum:go_ethereum:1.10.18
Ethereum » Go Ethereum » Version: 1.10.19

cpe:2.3:a:ethereum:go_ethereum:1.10.19
Ethereum » Go Ethereum » Version: 1.10.2

cpe:2.3:a:ethereum:go_ethereum:1.10.2
Ethereum » Go Ethereum » Version: 1.10.20

cpe:2.3:a:ethereum:go_ethereum:1.10.20
Ethereum » Go Ethereum » Version: 1.10.21

cpe:2.3:a:ethereum:go_ethereum:1.10.21
Ethereum » Go Ethereum » Version: 1.10.22

cpe:2.3:a:ethereum:go_ethereum:1.10.22
Ethereum » Go Ethereum » Version: 1.10.23

cpe:2.3:a:ethereum:go_ethereum:1.10.23
Ethereum » Go Ethereum » Version: 1.10.24

cpe:2.3:a:ethereum:go_ethereum:1.10.24
Ethereum » Go Ethereum » Version: 1.10.25

cpe:2.3:a:ethereum:go_ethereum:1.10.25
Ethereum » Go Ethereum » Version: 1.10.26

cpe:2.3:a:ethereum:go_ethereum:1.10.26
Ethereum » Go Ethereum » Version: 1.10.3

cpe:2.3:a:ethereum:go_ethereum:1.10.3
Ethereum » Go Ethereum » Version: 1.10.4

cpe:2.3:a:ethereum:go_ethereum:1.10.4
Ethereum » Go Ethereum » Version: 1.10.5

cpe:2.3:a:ethereum:go_ethereum:1.10.5
Ethereum » Go Ethereum » Version: 1.10.6

cpe:2.3:a:ethereum:go_ethereum:1.10.6
Ethereum » Go Ethereum » Version: 1.10.7

cpe:2.3:a:ethereum:go_ethereum:1.10.7
Ethereum » Go Ethereum » Version: 1.10.8

cpe:2.3:a:ethereum:go_ethereum:1.10.8
Ethereum » Go Ethereum » Version: 1.10.9

cpe:2.3:a:ethereum:go_ethereum:1.10.9
Ethereum » Go Ethereum » Version: 1.11.0

cpe:2.3:a:ethereum:go_ethereum:1.11.0
Ethereum » Go Ethereum » Version: 1.11.1

cpe:2.3:a:ethereum:go_ethereum:1.11.1
Ethereum » Go Ethereum » Version: 1.11.2

cpe:2.3:a:ethereum:go_ethereum:1.11.2
Ethereum » Go Ethereum » Version: 1.11.3

cpe:2.3:a:ethereum:go_ethereum:1.11.3
Ethereum » Go Ethereum » Version: 1.11.4

cpe:2.3:a:ethereum:go_ethereum:1.11.4
Ethereum » Go Ethereum » Version: 1.11.5

cpe:2.3:a:ethereum:go_ethereum:1.11.5
Ethereum » Go Ethereum » Version: 1.11.6

cpe:2.3:a:ethereum:go_ethereum:1.11.6
Ethereum » Go Ethereum » Version: 1.12.0

cpe:2.3:a:ethereum:go_ethereum:1.12.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40591

Products

Pricing

Contact Us