En resumen
- CVE-2022-37450 es una vulnerabilidad MEDIO (CVSS 5.9) que afecta a github.com/ethereum/go-ethereum, go ethereum (ethereum).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 69.8% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making (RUM), as exploited in the wild in 2020 through 2022.
NVD description
Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making (RUM), as exploited in the wild in 2020 through 2022.
Más vulnerabilidades de github.com/ethereum/go-ethereum
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free