FlawAtlas
Search the atlas
CVE-2026-22862 High

DoS via malicious p2p message affecting a vulnerable node in github.com/ethereum/go-ethereum

DoS via malicious p2p message affecting a vulnerable node in github.com/ethereum/go-ethereum

Exploit probability 0.6%
Published January 23, 2026
Required by Not available
Last source change March 3, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

176 explicit affected versions

Go github.com/ethereum/go-ethereum
Go github.com/ethereum/go-ethereum

03 / CONNECTIONS

Connected vulnerabilities

related OPENSUSE-SU-2026:21483-1

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2026-22862

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8.

View original source
Open Source Vulnerabilities GO-2026-4315

DoS via malicious p2p message affecting a vulnerable node in github.com/ethereum/go-ethereum

View original source
Open Source Vulnerabilities GHSA-mr7q-c9w9-wh4h

**Impact** A vulnerable node can be forced to shutdown/crash using a specially crafted message. More details to be released later. **Credit** This issue was reported to the Ethereum Foundation Bug Bounty Program by DELENE TCHIO ROMUALD.

View original source

05 / REFERENCES

Further evidence