Em resumo
- CVE-2022-37450 é uma vulnerabilidade MÉDIO (CVSS 5.9) que afeta github.com/ethereum/go-ethereum, go ethereum (ethereum).
- Chance de exploração nos próximos 30 dias (EPSS): 1.3%, maior que 69.8% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making (RUM), as exploited in the wild in 2020 through 2022.
NVD description
Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making (RUM), as exploited in the wild in 2020 through 2022.
Mais vulnerabilidades de github.com/ethereum/go-ethereum
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free