Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
LES Server DoS via GetProofsV2
Vulnerability Description
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can make a LES server crash via malicious GetProofsV2 request from a connected LES client. This vulnerability only concerns users explicitly enabling les server; disabling les prevents the exploit. The vulnerability was patched in version 1.9.25.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
Ethereum Go-ethereum 资源管理错误漏洞
Vulnerability Description
Ethereum Go-ethereum是Ethereum社区的一个用Go语言实现以太坊协议的代码库。 Ethereum Go-ethereum 1.9.25存在安全漏洞，该漏洞源于拒绝服务漏洞可以通过来自已连接LES客户端的恶意GetProofsV2请求使LES服务器崩溃。此漏洞只涉及显式启用les server的用户;禁用les可以防止攻击。该漏洞在1.9.25版本中被修补。
CVSS Information
N/A
Vulnerability Type
N/A