hyperledger besu vulnerabilities

Latest hyperledger besu CVEs

Newest publication first

1. CVE-2022-36025 Incorrect Conversion between Numeric Types in Besu Ethereum Client

   Published 2022-09-24

   Critical·CVSS 9.1 EPSS 1.1%

   Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Types. An error in 32 bit signed and unsigned types in the calculation of available gas in the CALL operations (including DELEGATECA...

2. CVE-2021-41272 SHL, SHR, and SAR operations trigger native exception at key values in besu

   Published 2021-12-13

   High·CVSS 7.5 EPSS 1.5%

   Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the introduction of a signed type coercion error in values that represent negative values for 32 bit signed integers. Smart contr...

3. CVE-2021-21369 Potential DoS in Besu HTTP JSON-RPC API

   Published 2021-03-09

   Medium·CVSS 6.5 EPSS 1.7%

   Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. In Besu before version 1.5.1 there is a denial-of-service vulnerability involving the HTTP JSON-RPC API service. If username and password authentication is enabled for the HTTP JSON-RPC API s...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.