CVE-2021-42766: Critical severity ethereum vulnerability
The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (long-range consensus chain reorganizations), even when this adversary has little stake and cannot influence network message propagation. This can cause a protocol stall, or an increase in the profits of individual validators.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-42766?
CVE-2021-42766 is considered a moderate severity vulnerability as it can result in denial of service via long-range chain reorganizations.
How do I fix CVE-2021-42766?
To mitigate CVE-2021-42766, users are advised to upgrade their Proof-of-Stake Ethereum implementation to a version released after October 19, 2021.
What is the impact of CVE-2021-42766 on Ethereum?
CVE-2021-42766 allows an adversary to potentially stall the Ethereum protocol through chain reorganizations, impacting network reliability.
Who is affected by CVE-2021-42766?
Users running any version of the Proof-of-Stake Ethereum software before October 19, 2021 are affected by CVE-2021-42766.
What does CVE-2021-42766 mean for Ethereum's Proof-of-Stake consensus?
CVE-2021-42766 highlights a vulnerability in the Proof-of-Stake consensus that could be exploited to disrupt network operations.