CVE-2017-12119: High severity ethereum blockchain vulnerability

Published Jan 19, 2018

Updated

An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. Specially crafted JSON requests can cause an unhandled exception resulting in denial of service. An attacker can send malicious JSON to trigger this vulnerability.

Affected Software

1 affected component

Ethereum cpp-ethereum

Event History

Jan 19, 2018

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2017-12119.

What is the severity of CVE-2017-12119?

CVE-2017-12119 has a severity value of 7.5 (high).

Which software is affected by CVE-2017-12119?

CPP-Ethereum JSON-RPC, specifically the Ethereum Cpp-ethereum software, is affected by CVE-2017-12119.

What is the impact of CVE-2017-12119?

Exploiting CVE-2017-12119 can result in denial of service (DoS) due to an unhandled exception.

Are there any references available for CVE-2017-12119?

Yes, you can find references for CVE-2017-12119 at the following links: [SecurityFocus](http://www.securityfocus.com/bid/102475) and [Talos Intelligence](https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0471).