PT-2026-20902 · Unknown+2 · Go-Ethereum+2

Revofusion · Publicado 2026-02-18 · Atualizado 2026-03-03 · CVE-2026-26313

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions go-ethereum (geth) versions prior to 1.17.0

Description A specially crafted p2p message can lead to high memory usage. The issue affects the Ethereum protocol implementation.

Recommendations Update to version 1.17.0 or later.

Exploit

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2026-26313

GHSA-689V-6XWF-5JF3

GO-2026-4508

SUSE-SU-2026:0757-1

Produtos afetados

Ethereum

Geth

Go-Ethereum

Referências · 117

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26313.json · Exploit
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-689v-6xwf-5jf3 · Aviso do Fabricante
• https://github.com/ethereum/go-ethereum/releases/tag/v1.17.0 · Nota
• https://github.com/ethereum/go-ethereum · Nota
• https://suse.com/security/cve/CVE-2026-26205 · Nota
• https://suse.com/security/cve/CVE-2026-23989 · Nota
• https://suse.com/security/cve/CVE-2017-18916 · Nota
• https://suse.com/security/cve/CVE-2023-43636 · Nota
• https://suse.com/security/cve/CVE-2026-23633 · Nota
• https://suse.com/security/cve/CVE-2026-23992 · Nota
• https://suse.com/security/cve/CVE-2026-26187 · Nota
• https://suse.com/security/cve/CVE-2026-25882 · Nota
• https://suse.com/security/cve/CVE-2017-18903 · Nota
• https://suse.com/security/cve/CVE-2026-25120 · Nota
• https://suse.com/security/cve/CVE-2025-70963 · Nota