From b3e49b9fbbe5df5aec9741b13a299d085b974029 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Thu, 15 Aug 2024 17:04:00 +0000
Subject: [PATCH] Publish Advisories

GHSA-4g2x-vq5p-5vj6
GHSA-4xc9-8hmq-j652
GHSA-878h-rqcq-mv3x
---
 .../2024/03/GHSA-4g2x-vq5p-5vj6/GHSA-4g2x-vq5p-5vj6.json      | 2 +-
 .../2024/05/GHSA-4xc9-8hmq-j652/GHSA-4xc9-8hmq-j652.json      | 4 ++--
 .../2024/06/GHSA-878h-rqcq-mv3x/GHSA-878h-rqcq-mv3x.json      | 3 ++-
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2024/03/GHSA-4g2x-vq5p-5vj6/GHSA-4g2x-vq5p-5vj6.json b/advisories/github-reviewed/2024/03/GHSA-4g2x-vq5p-5vj6/GHSA-4g2x-vq5p-5vj6.json
index 085f4690921..39d4abcea59 100644
--- a/advisories/github-reviewed/2024/03/GHSA-4g2x-vq5p-5vj6/GHSA-4g2x-vq5p-5vj6.json
+++ b/advisories/github-reviewed/2024/03/GHSA-4g2x-vq5p-5vj6/GHSA-4g2x-vq5p-5vj6.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4g2x-vq5p-5vj6",
-  "modified": "2024-03-01T20:09:00Z",
+  "modified": "2024-08-15T17:02:27Z",
   "published": "2024-03-01T20:09:00Z",
   "aliases": [
 
diff --git a/advisories/github-reviewed/2024/05/GHSA-4xc9-8hmq-j652/GHSA-4xc9-8hmq-j652.json b/advisories/github-reviewed/2024/05/GHSA-4xc9-8hmq-j652/GHSA-4xc9-8hmq-j652.json
index 9841e472ddd..1996a4d712d 100644
--- a/advisories/github-reviewed/2024/05/GHSA-4xc9-8hmq-j652/GHSA-4xc9-8hmq-j652.json
+++ b/advisories/github-reviewed/2024/05/GHSA-4xc9-8hmq-j652/GHSA-4xc9-8hmq-j652.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4xc9-8hmq-j652",
-  "modified": "2024-05-09T13:23:00Z",
+  "modified": "2024-08-15T17:02:24Z",
   "published": "2024-05-06T14:20:40Z",
   "aliases": [
     "CVE-2024-32972"
   ],
   "summary": "go-ethereum vulnerable to DoS via malicious p2p message",
-  "details": "### Impact\n\nA vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node.\n\nMore in-depth details will be released at a later time. \n\n### Patches\n\nThe fix has been included in geth version `1.13.15` and onwards.\n\n### Workarounds\n\nNo workarounds have been made public. \n\n### References\n\nNo more information is released at this time.\n\n### Credit\n\nThis issue was disclosed responsibly by DongHan Kim via the Ethereum bug bounty program. Thank you for your cooperation. ",
+  "details": "### Impact\n\nA vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node.\n\nIn order to carry out the attack, the attacker establishes a peer connections to the victim, and sends a malicious `GetBlockHeadersRequest` message with a `count` of  `0`, using the `ETH` protocol. \n\nIn `descendants := chain.GetHeadersFrom(num+count-1, count-1)`, the value of `count-1` is passed to the function `GetHeadersFrom(number, count uint64)` as parameter `count`. Due to integer overflow, `UINT64_MAX` value is then passed as the `count` argument to function `GetHeadersFrom(number, count uint64)`. This allows an attacker to bypass `maxHeadersServe` and request all headers from from the latest block back to the genesis block. \n\n### Patches\n\nThe fix has been included in geth version `1.13.15` and onwards. \n\nThe vulnerability was patched in: https://github.com/ethereum/go-ethereum/pull/29534\n\n### Workarounds\n\nNo workarounds have been made public. \n\n### References\n\nNo more information is released at this time.\n\n### Credit\n\nThis issue was disclosed responsibly by DongHan Kim via the Ethereum bug bounty program. Thank you for your cooperation. ",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/github-reviewed/2024/06/GHSA-878h-rqcq-mv3x/GHSA-878h-rqcq-mv3x.json b/advisories/github-reviewed/2024/06/GHSA-878h-rqcq-mv3x/GHSA-878h-rqcq-mv3x.json
index 1000444f722..090ee445368 100644
--- a/advisories/github-reviewed/2024/06/GHSA-878h-rqcq-mv3x/GHSA-878h-rqcq-mv3x.json
+++ b/advisories/github-reviewed/2024/06/GHSA-878h-rqcq-mv3x/GHSA-878h-rqcq-mv3x.json
@@ -52,7 +52,8 @@
   "database_specific": {
     "cwe_ids": [
       "CWE-22",
-      "CWE-434"
+      "CWE-434",
+      "CWE-94"
     ],
     "severity": "CRITICAL",
     "github_reviewed": true,