Denial of Service in Bytom

HIGH 7.5CVE-2018-18206 · GHSA-vc3x-gx6c-g99f · GO-2021-0079 · Published 10/10/2018 · updated 17/06/2026

In short

CVE-2018-18206 is a HIGH (CVSS 7.5) vulnerability affecting github.com/bytom/bytom, bytom (bytom).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.5% of all vulnerabilities.
Fix: update to 1.0.4-0.20180831054840-1ac3c8ac4f2b, 1.0.6 or later.

Package	Affected versions	Patched versions
github.com/bytom/bytom Go	`< 1.0.4-0.20180831054840-1ac3c8ac4f2b< 1.0.6`	`1.0.4-0.20180831054840-1ac3c8ac4f2b1.0.6`
bytom bytom	`< 1.0.6`	`1.0.6`

In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash.

NVD description

In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.