PT-2022-19431 · Unknown · Go-Ethereum

Nrvvia · Published 2022-05-20 · Updated 2025-08-08 · CVE-2022-29177

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Go Ethereum versions prior to 1.10.17

Description A vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node.

Recommendations For versions prior to 1.10.17, update to version 1.10.17 to resolve the issue. As a temporary workaround, setting loglevel to default level (INFO) makes the node not vulnerable to this attack.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2022-29177

GHSA-WJXW-GH3M-7PM5

GO-2022-0456

OPENSUSE-SU-2025:15424-1

Affected Products

Go-Ethereum

References · 54

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29177.json · Exploit
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-wjxw-gh3m-7pm5 · Patch
• https://github.com/ethereum/go-ethereum/pull/24507 · Patch
• https://osv.dev/vulnerability/CVE-2022-29177 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0456 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29177 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15424-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wjxw-gh3m-7pm5 · Vendor Advisory
• https://suse.com/security/cve/CVE-2024-45310 · Note
• https://suse.com/security/cve/CVE-2020-8562 · Note
• https://suse.com/security/cve/CVE-2023-2431 · Note
• https://suse.com/security/cve/CVE-2019-11245 · Note
• https://suse.com/security/cve/CVE-2021-25737 · Note
• https://suse.com/security/cve/CVE-2023-28642 · Note
• https://suse.com/security/cve/CVE-2020-26241 · Note