aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYusuf Yaman <nxjoseph@FreeBSD.org>2026-04-16 15:05:40 +0000
committerYusuf Yaman <nxjoseph@FreeBSD.org>2026-04-16 15:06:13 +0000
commit4abd8b03fba6c6780d1076e483bfba0692435d44 (patch)
tree126085a70d70159b8627b157cf924ec93e727384
parentabbfe437e46c2fde7b7ea759f93df8c8e71ebe9b (diff)
security/vuxml: Add go-ethereum vulnerabilities
PR: 293829 Approved by: vvd (co-mentor)
-rw-r--r--security/vuxml/vuln/2026.xml34
1 files changed, 34 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index 726732b11131..23234671a2c1 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -1,3 +1,37 @@
+ <vuln vid="9c8c00ce-3642-11f1-bd03-3c7c3fba4204">
+ <topic>go-ethereum -- vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>go-ethereum</name>
+ <range><lt>1.17.0</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>https://github.com/ethereum/go-ethereum/security/advisories reports:</p>
+ <blockquote cite="https://github.com/ethereum/go-ethereum/security/advisories">
+ <ul>
+ <li>DoS via malicious p2p message (CVE-2026-26313)</li>
+ <li>DoS via malicious p2p message (CVE-2026-26314)</li>
+ <li>Improper ECIES Public Key Validation in RLPx Handshake (CVE-2026-26315)</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2026-26313</cvename>
+ <url>https://github.com/ethereum/go-ethereum/security/advisories/GHSA-689v-6xwf-5jf3</url>
+ <cvename>CVE-2026-26314</cvename>
+ <url>https://github.com/ethereum/go-ethereum/security/advisories/GHSA-2gjw-fg97-vg3r</url>
+ <cvename>CVE-2026-26315</cvename>
+ <url>https://github.com/ethereum/go-ethereum/security/advisories/GHSA-m6j8-rg6r-7mv8</url>
+ </references>
+ <dates>
+ <discovery>2026-02-17</discovery>
+ <entry>2026-04-12</entry>
+ </dates>
+ </vuln>
+
<vuln vid="d93c247b-4dba-43ce-b5c0-ac5bd03bea8d">
<topic>chromium -- security fixes</topic>
<affects>