go-ethereum Denial-of-Service Vulnerability via Malicious p2p Message

A denial-of-service vulnerability has been identified in go-ethereum (geth) versions prior to 1.17.0. An attacker can exploit this vulnerability by sending a specially-crafted p2p message, leading to high memory usage.

Impact

Exploitation of this vulnerability causes excessive memory consumption, which can degrade performance or cause the application to become unresponsive.

Remediation

Users can upgrade to go-ethereum version 1.17.0 or later to address this vulnerability. Instructions for downloading this version are available on the Geth downloads page.