CVE-2018-16733

7.5
HIGHCVSS v3.1 Base Score
1.21%
LOW RiskEPSS (68th percentile)
CWE-20

In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.

Published: 9/8/2018
Modified: 6/17/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2 Score

5

AV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS Score (Exploitation Probability)

1.21%LOW Exploitation Risk
68th percentile

This vulnerability has a 1.21% probability of being exploited in the next 30 days, ranking higher than 68% of all scored CVEs.

CWE Classification

CWE-20

Learn More

CVSS Calculator

View this score breakdown or calculate a custom score

Understanding CVSS Scoring

Learn how severity scores are calculated and what they mean

CVE Prioritization Guide

Best practices for deciding which vulnerabilities to address first

What is a CVE?

Essential guide to Common Vulnerabilities and Exposures

CVE vs CWE Explained

Understand how CVEs relate to underlying weakness types

Advertisement