CVE-2018-18206: Panic in github.com/bytom/bytom
Summary
CVE-2018-18206: Panic in github.com/bytom/bytom. Affects github.com/bytom/bytom versions < 1.0.4-0.20180831054840-1ac3c8ac4f2b. Fixed in 1.0.4-0.20180831054840-1ac3c8ac4f2b. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package github.com/bytom/bytom is written in Go and is used for a specific functionality. It is vulnerable to a panic caused by a malformed query. This vulnerability occurs due to improper validation of arguments, allowing an out-of-bounds panic. If the package processes queries from untrusted sources, this vulnerability can be exploited for denial of service attacks.
Vulnerability Detail
The vulnerability (CVE-2018-18206) in github.com/bytom/bytom is triggered by a malformed query that leads to an out-of-bounds panic. This occurs because the package does not properly validate the arguments provided. Attackers can exploit this vulnerability to launch denial of service attacks, potentially disrupting the functionality of the affected system.
How To Fix
Latest published version: v1.1.1 as of 23 Oct 2026
go get github.com/bytom/bytom@v1.1.1Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.0.4-0.20180831054840-1ac3c8ac4f2b
This is the first release that contains the fix.
go get github.com/bytom/bytom@v1.0.4-0.20180831054840-1ac3c8ac4f2bTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in github.com/bytom/bytom (CVE-2018-18206) can be fixed by updating the package to version 1.0.4-0.20180831054840-1ac3c8ac4f2b or later. This will address the improper validation of query arguments and prevent the out-of-bounds panic. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for github.com/bytom/bytom →
FAQ
This vulnerability can be exploited by attackers to launch denial of service attacks, potentially disrupting the affected system's functionality.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. No signup is required, and you can simply input your application's information to receive real-time alerts.
Yes, updating the package to version 1.0.4-0.20180831054840-1ac3c8ac4f2b or later will fix this vulnerability.
Yes, this vulnerability can be exploited remotely if the package processes queries from untrusted sources.
There are no known instances of this vulnerability being exploited at this time.
