CVE-2021-41173: Ethereum Go Ethereum

Medium severity, CVSS 5.7. EPSS: 1.2% chance of exploitation in the next 30 days.

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. There are no known workarounds aside from upgrading.

Affected products

• Ethereum Go Ethereum: before 1.10.9 (fixed in 1.10.9)

Published 2021-10-26. Last modified 2026-06-17.