{"id":"CVE-2018-19184","published":"2018-11-12T02:00:00Z","modified":"2024-08-05T11:30:04Z","title":"cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted…","vendor":null,"product":null,"tier":"tail","description":{"text":"cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01469,"percentile":0.73734,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/ethereum/go-ethereum/issues/18069","tags":["x_refsource_MISC"]}],"priority":{"score":14.7,"factors":[{"name":"EPSS percentile","points":14.75}]},"affected":[{"ecosystem":"Go","package":"github.com/ethereum/go-ethereum","vulnerableRanges":["<1.8.14"],"patched":["1.8.14"],"from":["GHSA-9h4h-8w5p-f28w","GO-2022-0814"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-1302","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2018-12018","published":"2018-07-05","fixed":"1.8.11","kev":false,"link":{"from":"CVE-2018-12018","to":"CVE-2018-19184","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Go:github.com/ethereum/go-ethereum","fromFixed":"1.8.11","toFixed":"1.8.14","daysApart":130}]}},{"cve":"CVE-2018-16733","published":"2018-09-08","fixed":"1.8.14","kev":false},{"cve":"CVE-2018-19184","published":"2018-11-12","fixed":"1.8.14","kev":false},{"cve":"CVE-2020-26241","published":"2020-11-25","fixed":"1.9.17","kev":false},{"cve":"CVE-2020-26242","published":"2020-11-25","fixed":"1.9.18","kev":false},{"cve":"CVE-2020-26265","published":"2020-12-11","fixed":"1.9.20","kev":false}],"package":"Go:github.com/ethereum/go-ethereum"}}