Executive brief
Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks
Affected products
- Go github.com/ethereum/go-ethereum
Junglewise Threat Intelligence
CVE-2022-37450: Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks
CVE-2022-37450 · Severity: low · CVSS 3.1 · Published 2022-08-06
Technologies: github.com/ethereum/go-ethereum (Go). Vendors: Go.
Related threats
- GO-2026-4511 - Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake in github.com/ethereum/go-ethereum
- GO-2026-4507 - Go Ethereum affected by crash via malicious p2p message in github.com/ethereum/go-ethereum
- GO-2026-4508 - Go Ethereum affected by DoS via malicious p2p message in github.com/ethereum/go-ethereum
- GO-2026-4315 - DoS via malicious p2p message affecting a vulnerable node in github.com/ethereum/go-ethereum
- GO-2026-4314 - High CPU usage leading to DoS via malicious p2p message in github.com/ethereum/go-ethereum