{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-24T12:05:58.743","vulnerabilities":[{"cve":{"id":"CVE-2023-40591","sourceIdentifier":"security-advisories@github.com","published":"2023-09-06T19:15:44.100","lastModified":"2024-11-21T08:19:46.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version `1.12.1-stable`, i.e, `1.12.2-unstable` and onwards. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n"},{"lang":"es","value":"go-ethereum (geth) es una implementación de la capa de ejecución golang del protocolo Ethereum. Se puede hacer que un nodo vulnerable consuma cantidades ilimitadas de memoria cuando se manejan mensajes p2p especialmente manipulados enviados desde un nodo atacante. La corrección se incluye en la versión de geth '1.12.1-stable', es decir, '1.12.2-unstable' y posteriores. Se recomienda a los usuarios que actualicen. No hay workarounds conocidas para esta vulnerabilidad."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*","versionStartIncluding":"1.10.0","versionEndExcluding":"1.12.1","matchCriteriaId":"0BB58DD3-06EB-4264-A101-4274CF19120E"}]}]}],"references":[{"url":"https://geth.ethereum.org/docs/developers/geth-developer/disclosures","source":"security-advisories@github.com","tags":["Product"]},{"url":"https://github.com/ethereum/go-ethereum/releases/tag/v1.12.1","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-ppjg-v974-84cm","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://geth.ethereum.org/docs/developers/geth-developer/disclosures","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://github.com/ethereum/go-ethereum/releases/tag/v1.12.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-ppjg-v974-84cm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}