Affected configurations: All Go consumer variations 

Chance: Very low

Severity: Excessive

Particulars: A bug in Geth (and doubtlessly different purchasers) could endure from a DoS assault and permits distant attackers to stall synchronisation course of nearly indefinitely by supplying a legitimate, lighter chain. Extra data will probably be given out a later time together with the report that was submitted via the bug bounty program.

Results on anticipated chain reorganisation depth: None

Proposed short-term workaround: None

Remedial motion taken by Ethereum: Provision of hotfixes as under:

If you happen to’re utilizing Mist: obtain the up to date binary from the launch web page

If utilizing the PPA: sudo apt-get replace then sudo apt-get improve

If utilizing brew: brew replace then brew reinstall ethereum

If utilizing a home windows binary: obtain the up to date binary from the launch web page

If you’re constructing from supply: git pull adopted by make geth (please use the Grasp department 94ad694a26ca3f7776ec8240802596755e5d5c0a)