PT-2021-23148 · Unknown · Go-Ethereum

Holiman + 1 · Published 2021-10-25 · Updated 2022-07-15 · CVE-2021-41173

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Go Ethereum versions prior to 1.10.9

Description A vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer, via the snap/1 protocol. The crash can be triggered by sending a malicious snap/1 GetTrieNodes package. In the trie.TryGetNode implementation, if the requested path is reached, the associated node will be returned, but the nilness is not checked, which can cause a panic.

Recommendations For versions prior to 1.10.9, upgrade to version 1.10.9 or apply the patch to resolve the issue. As a temporary workaround, consider restricting access to the snap/1 protocol to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-41173

GHSA-59HH-656J-3P7V

GO-2022-0256

Affected Products

Go-Ethereum

References · 13

• https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738 · Patch
• https://github.com/ethereum/go-ethereum/pull/23801 · Patch
• https://osv.dev/vulnerability/GHSA-59hh-656j-3p7v · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0256 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41173 · Security Note
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-59hh-656j-3p7v · Note
• https://github.com/ethereum/go-ethereum/releases/tag/v1.10.9 · Note
• https://github.com/ethereum/go-ethereum · Note
• https://github.com/ethereum/go-ethereum/pull/23657/commits/f1fd963a5a965e643e52fcf805a2a02a323c32b8 · Note
• https://t.me/cvenotify/22611 · Telegram Post
• https://t.me/cibsecurity/31220 · Telegram Post
• https://pkg.go.dev/vuln/GO-2022-0256 · Note