-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description explicitly states the p2p handler spawned new goroutines to respond to ping requests. In Go-Ethereum's architecture, ping handling would logically be implemented in the p2p server component. The standard pattern for this would involve a function like handlePing in p2p/server.go that uses 'go' keyword concurrency. The root cause matches classic 'unbounded goroutine creation' patterns, and the fix PR #27887 would have modified this handling to add concurrency limits.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/ethereum/go-ethereum | go | < 1.12.1-stable | 1.12.1-stable |