CVE-2021-39137
Published: 24 August 2021
Summary
CVE-2021-39137 is a medium-severity Interpretation Conflict (CWE-436) vulnerability in Ethereum Go Ethereum. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 47.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-1653
Vulnerability details
go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed…
more
at a later date. A patch is included in the upcoming `v1.10.8` release. No workaround are available.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.