Get a Pentest and security assessment of your IT network.

2021-current

CVE-2020-26240 – Go Ethereum, or “Geth”, is the official Golang implementation of the Ethe

Go Ethereum, or “Geth”, is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1.9.24 could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). This happened on the ETC chain on 2020-11-06. This issue is relevant only for miners, non-mining nodes are unaffected. This issue is fixed as of 1.9.24

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26240

Reference (s):

  • https://github.com/ethereum/go-ethereum/security/advisories/GHSA-v592-xf75-856p
  • URL: https://github.com/ethereum/go-ethereum/security/advisories/GHSA-v592-xf75-856p
  • https://blog.ethereum.org/2020/11/12/geth_security_release/
  • URL: https://blog.ethereum.org/2020/11/12/geth_security_release/
  • https://github.com/ethereum/go-ethereum/commit/d990df909d7839640143344e79356754384dcdd0
Related posts
2021-current

CVE-2004-1715 - Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 all

2021-current

CVE-2014-8508 - Cross-site scripting (XSS) vulnerability in s_network.asp in the Denon AV

2021-current

CVE-2020-0297 - In devicepolicy service, there is a possible permission bypass due to an

2021-current

CVE-2020-14315 - A memory corruption vulnerability is present in bspatch as shipped in Col