CVE-2021-42766

9.1 CRITICAL

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (long-range cons...

Published: 2021-10-20 · Last updated: 2026-06-17

Severity and scoring

CVSS: 9.1 CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Affected products

Vendor	Product
proof-of-stake_ethereum_project	proof-of-stake_ethereum

Description

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (long-range consensus chain reorganizations), even when this adversary has little stake and cannot influence network message propagation. This can cause a protocol stall, or an increase in the profits of individual validators.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-42766
[Other]https://arxiv.org/abs/2110.10086
[Other]https://arxiv.org/abs/2110.10086

Related CVEs

Same vendor

CVE-2021-42765 — The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial o... (7.5 HIGH)
CVE-2021-42764 — The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (delayed consens... (9.1 CRITICAL)