In short
- CVE-2022-37450 is a MEDIUM (CVSS 5.9) vulnerability affecting github.com/ethereum/go-ethereum, go ethereum (ethereum).
- Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.8% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making (RUM), as exploited in the wild in 2020 through 2022.
NVD description
Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making (RUM), as exploited in the wild in 2020 through 2022.
More vulnerabilities in github.com/ethereum/go-ethereum
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free