CVE-2023-40591 Information

Description

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable i.e 1.12.2-unstable and onwards. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Reference

https://geth.ethereum.org/docs/developers/geth-developer/disclosures https://github.com/ethereum/go-ethereum/releases/tag/v1.12.1 https://github.com/ethereum/go-ethereum/security/advisories/GHSA-ppjg-v974-84cm