{"id":"CVE-2018-19184","published":"2018-11-12T02:00:00Z","modified":"2024-08-05T11:30:04Z","title":"cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted…","vendor":null,"product":null,"tier":"tail","description":{"text":"cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01469,"percentile":0.73664,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/ethereum/go-ethereum/issues/18069","tags":["x_refsource_MISC"]}],"priority":{"score":14.7,"factors":[{"name":"EPSS percentile","points":14.73}]},"affected":[{"ecosystem":"Go","package":"github.com/ethereum/go-ethereum","vulnerableRanges":["<1.8.14"],"patched":["1.8.14"],"from":["GHSA-9h4h-8w5p-f28w","GO-2022-0814"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-1302","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-ethereum-go-ethereum-cve-2018-19184","children":[{"from":"CVE-2018-19184","to":"CVE-2020-26241","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["cmd/evm/runner.go","cmd/evm/staterunner.go"],"commits":["https://github.com/ethereum/go-ethereum/commit/83e2761c3a13524bd5d6597ac08994488cf872ef","https://github.com/ethereum/go-ethereum/commit/fb9f7261ec51e38eedb454594fc19f00de1a6834","https://github.com/ethereum/go-ethereum/commit/295693759e5ded05fec0b2fb39359965b60da785"],"basis":"shared function","functions":["runCmd","stateTestCmd"]}]}],"packageHistory":[{"cve":"CVE-2018-12018","published":"2018-07-05","fixed":"1.8.11","kev":false,"link":{"from":"CVE-2018-12018","to":"CVE-2018-19184","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Go:github.com/ethereum/go-ethereum","fromFixed":"1.8.11","toFixed":"1.8.14","daysApart":130}]}},{"cve":"CVE-2018-16733","published":"2018-09-08","fixed":"1.8.14","kev":false},{"cve":"CVE-2018-19184","published":"2018-11-12","fixed":"1.8.14","kev":false},{"cve":"CVE-2020-26241","published":"2020-11-25","fixed":"1.9.17","kev":false},{"cve":"CVE-2020-26242","published":"2020-11-25","fixed":"1.9.18","kev":false},{"cve":"CVE-2020-26265","published":"2020-12-11","fixed":"1.9.20","kev":false}],"package":"Go:github.com/ethereum/go-ethereum"}}