CVE-2020-26265CWE-682

Consensus flaw during block processing

Medium · published December 11, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade release version 1.9.20. No individual workaround patches have been made -- all users are recommended to upgrade to a newer version.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00920 · 59.9th percentile
Weakness
CWE-682 · Incorrect Calculation
Published
2020-12-11T16:45Z
EPSS history
Timeline
  • 11 DEC 16:45Z
    Consensus flaw during block processing
    cvelistv5