{"id":"CVE-2021-41173","aliases":["GHSA-59hh-656j-3p7v","GO-2022-0256"],"url":"https://o3.security/vulnerability/CVE-2021-41173","summary":"Geth Node Vulnerable to DoS via maliciously crafted p2p message ","details":"Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.","published":"2021-10-26T14:15:08.130Z","modified":"2026-08-07T19:48:39.261608Z","cvss":{"score":5.7,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Go","name":"github.com/ethereum/go-ethereum","fixedVersion":"1.10.9"}],"fix":{"url":"https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738","label":"ethereum/go-ethereum@e40b377"},"references":[{"type":"ADVISORY","url":"https://github.com/ethereum/go-ethereum/releases/tag/v1.10.9"},{"type":"ADVISORY","url":"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-59hh-656j-3p7v"},{"type":"FIX","url":"https://github.com/ethereum/go-ethereum/commit/e40b37718326b8b4873b3b00a0db2e6c6d9ea738"},{"type":"FIX","url":"https://github.com/ethereum/go-ethereum/pull/23801"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T19:48:39.261608Z"}}