PT-2025-5590 · Unknown+1 · Go-Ethereum+1

Iam-Ned · Published 2025-01-30 · Updated 2026-02-19 · CVE-2025-24883

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions go-ethereum (geth) versions 1.14.0 through 1.14.12

Description A vulnerable node can be forced to shutdown or crash using a specially crafted message. Approximately 42.99% of geth nodes are still exposed to the issue, with around 18.5% of the total Ethereum network potentially at risk. Node operators are strongly encouraged to upgrade to the latest version to address the issue.

Recommendations go-ethereum (geth) versions 1.14.0 through 1.14.12: Update to version 1.14.13 to address the issue. Verify compatibility with your existing Ethereum infrastructure and test the update before applying it to your production environment.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-248

CWE-20

Related Identifiers

CVE-2025-24883

GHSA-Q26P-9CQ4-7FC2

GO-2025-3436

OPENSUSE-SU-2025:14732-1

OPENSUSE-SU-2025_0429-1

SUSE-SU-2025:0429-1

Affected Products

Suse

Go-Ethereum

References · 68

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24883.json · Exploit
• https://osv.dev/vulnerability/GO-2025-3436 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q26p-9cq4-7fc2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14732-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24883 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:0429-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-24883 · Vendor Advisory
• https://github.com/ethereum/go-ethereum/commit/fa9a2ff8687ec9efe57b4b9833d5590d20f8a83f · Note
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-q26p-9cq4-7fc2 · Note
• https://github.com/ethereum/go-ethereum · Note
• https://github.com/ethereum/go-ethereum/commit/159fb1a1db551c544978dc16a5568a4730b4abf3 · Note
• https://suse.com/security/cve/CVE-2024-3727 · Note
• https://suse.com/security/cve/CVE-2024-35177 · Note
• https://twitter.com/EthereumOnARM/status/1884983950440796345 · Twitter Post
• https://suse.com/security/cve/CVE-2025-23216 · Note