DoS via malicious p2p message

A denial-of-service vulnerability in the go-ethereum (geth) node allows a remote attacker to make a vulnerable node consume very large amounts of memory via specially crafted p2p messages. The attacker connects to the victim and sends a GetBlockHeadersRequest message with a count of 0 using the ETH protocol. Due to integer overflow in the count-1 calculation passed to GetHeadersFrom, the function receives UINT64_MAX, which bypasses maxHeadersServe and requests all headers from the latest block back to the genesis block. The fix is included in geth version 1.13.15 and later, and the issue was disclosed by DongHan Kim through the Ethereum bug bounty program.