HIGHCVSS 7.5EPSS 1.4%

CVE-2022-23327

Denial of Service in Go-Ethereum

Published: 2022-03-05
Modified: 2026-09-02
EPSS percentile: 70%
Aliases: GHSA-pvx3-gm3c-gmpr
Sources: github-advisory

Summary

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
Go	github.com/ethereum/go-ethereum	—	—

Remediation: No patched version is listed by GitHub.

References

https://github.com/advisories/GHSA-pvx3-gm3c-gmpr

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.