Detections
Analytics
Alpine: multiple geth packages: security update to 1.17.0-r0
high Tenable Cloud Security Plugin ID 438138
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version
1.17.0, an attacker can cause high memory usage by sending a specially-crafted p2p message. The issue is
resolved in the v1.17.0 release. (CVE-2026-26313)
- go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version
1.16.9, a vulnerable node can be forced to shutdown/crash using a specially crafted message. The problem
is resolved in the v1.16.9 and v1.17.0 releases of Geth. (CVE-2026-26314)
- go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version
1.16.9, through a flaw in the ECIES cryptography implementation, an attacker may be able to extract bits
of the p2p node key. The issue is resolved in the v1.16.9 and v1.17.0 releases of Geth. Geth maintainers
recommend rotating the node key after applying the upgrade, which can be done by removing the file
`<datadir>/geth/nodekey` before starting Geth. (CVE-2026-26315)
See Also
https://security.alpinelinux.org/vuln/CVE-2026-26313
Plugin Details
Severity: High
ID: 438138
Version: Revision 1.6
Type: Local
Published: 3/4/2026
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.73
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS Score Source: CVE-2026-26315
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.7
Threat Score: 6.6
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2026-26314
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 2/18/2026