CVE-2018-18206: Denial of Service in Bytom
Summary
CVE-2018-18206: Denial of Service in Bytom. Affects github.com/bytom/bytom versions < 1.0.6. Fixed in 1.0.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Bytom is an open-source blockchain platform that enables the creation and management of digital assets. It is implemented in Go and provides a decentralized network for asset issuance and transfer. Bytom versions prior to 1.0.6 are affected by a Denial of Service vulnerability.
Vulnerability Detail
The vulnerability, identified as CVE-2018-18206, exists in the client implementation of Bytom. Specifically, the 'checkTopicRegister' function in 'p2p/discover/net.go' does not properly handle negative 'idx' values, leading to a crash. An attacker can exploit this flaw by sending a specially crafted request to the affected client, causing it to crash and resulting in a denial of service condition. The impact of this vulnerability can disrupt the availability of the Bytom network and potentially lead to financial losses for users.
How To Fix
Latest published version: v1.1.1 as of 23 Oct 2026
go get github.com/bytom/bytom@v1.1.1Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.0.6
This is the first release that contains the fix.
go get github.com/bytom/bytom@v1.0.6Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update to the patched version of Bytom to mitigate the risk of exploitation.
Conclusion
The Denial of Service vulnerability in Bytom, identified as CVE-2018-18206, can be mitigated by upgrading to version 1.0.6 or later. It is crucial to promptly apply the patch to ensure the stability and security of the Bytom network. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for github.com/bytom/bytom →
FAQ
The vulnerability can lead to a denial of service condition, causing the affected Bytom client to crash and potentially disrupting the availability of the Bytom network.
To fix this vulnerability, it is recommended to upgrade to Bytom version 1.0.6 or later, which includes a patch for the issue.
No, there is no known workaround for this vulnerability. Updating to the patched version is the only solution.
No, only versions prior to 1.0.6 are affected by this vulnerability. It is crucial to update to the latest version to ensure security.
Yes, if the Bytom network is disrupted due to the denial of service condition caused by this vulnerability, it can potentially result in financial losses for users.
