{
"id": "GHSA-v592-xf75-856p",
"aliases": [
"CVE-2020-26240"
],
"details": "### Impact\nAn ethash mining DAG generation flaw in Geth could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). This happened on the ETC chain on 2020-11-06. This issue is relevant only for miners, non-mining nodes are unaffected.\n\n### Patches\nThis issue is also fixed as of 1.9.24. Thanks to @slavikus for bringing the issue to our attention and writing the fix. \n\n### Workarounds\nThis PR implements a patch: https://github.com/ethereum/go-ethereum/pull/21793 \n\n### References\nhttps://blog.ethereum.org/2020/11/12/geth_security_release/\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum)\n* Email us at [[email protected] ](mailto:[email protected] )",
"summary": "Erroneous Proof of Work calculation in geth",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.9.24"
}
]
}
],
"package": {
"name": "github.com/ethereum/go-ethereum",
"ecosystem": "Go"
}
}
],
"modified": "2025-01-30T14:39:18Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N"
}
],
"published": "2021-06-29T21:12:56Z",
"references": [
{
"url": "https://github.com/ethereum/go-ethereum/security/advisories/GHSA-v592-xf75-856p",
"type": "WEB"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26240",
"type": "ADVISORY"
},
{
"url": "https://github.com/ethereum/go-ethereum/pull/21793",
"type": "WEB"
},
{
"url": "https://github.com/ethereum/go-ethereum/commit/d990df909d7839640143344e79356754384dcdd0",
"type": "WEB"
},
{
"url": "https://blog.ethereum.org/2020/11/12/geth_security_release",
"type": "WEB"
},
{
"url": "https://github.com/ethereum/go-ethereum",
"type": "PACKAGE"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-682"
],
"severity": "MODERATE",
"github_reviewed": true,
"nvd_published_at": null,
"github_reviewed_at": "2021-05-21T21:52:58Z"
}
}