Vulnerabilities > CVE-2021-43668 - NULL Pointer Dereference vulnerability in Ethereum GO Ethereum 1.10.9

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
ethereum
CWE-476

Summary

Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal.

Vulnerable Configurations

Part Description Count
Application
Ethereum
1

Common Weakness Enumeration (CWE)