Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-37450 · ADVISORY
• ethereum/go-ethereum · PACKAGE
• ethereum/go-ethereum · WEB
• medium.com/@aviv.yaish/uncle-maker-time-stamping-out-the-competition-in-ethereum-d27c1cb62fef · WEB
• news.ycombinator.com/item · WEB
• dx.doi.org/10.13140/RG.2.2.27813.99043 · WEB
• medium.com/%40aviv.yaish/uncle-maker-time-stamping-out-the-competition-in-ethereum-d27c1cb62fef

github.com/ethereum/go-ethereum のその他の脆弱性

• CVE-2026-26315高 7.5go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, through a flaw in the ECIES…
• CVE-2026-26314高 7.5go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, a vulnerable node can be fo…
• CVE-2026-26313高 7.5go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an attacker can cause high …
• CVE-2026-22868高 7.5go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash us…
• CVE-2026-22862高 7.5go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash us…