High severity7.5OSV Advisory· Published May 6, 2024· Updated Apr 15, 2026
CVE-2024-32972
CVE-2024-32972
Description
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to 1.13.15, a vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix has been included in geth version 1.13.15 and onwards.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/ethereum/go-ethereumGo | < 1.13.15 | 1.13.15 |
Affected products
2- Range: 0.2.2, 0.3.0, 0.3.1, …
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.