A NULL pointer dereference vulnerability in Klever-Go versions 1.7.14 through 1.7.17 poses a high risk of service disruption for blockchain protocol nodes.

This vulnerability is a NULL pointer dereference (CWE-476) occurring within the Klever-Go implementation. It is remotely exploitable by an unauthenticated attacker, potentially causing the application to crash.

A successful exploit results in a denial of service, rendering the affected blockchain node unavailable. With a CVSS score of 7.5, this high-severity flaw threatens operational continuity and network participation, which could lead to significant downtime for dependent services.

Immediate Action: Update the Klever-Go implementation to version 1.7.18 or later to incorporate the vendor-supplied fix.

Proactive Monitoring: Monitor node logs for frequent application crashes or unexpected service restarts that may indicate attempted exploitation.

Compensating Controls: Implement rate limiting and input validation at the network perimeter to filter malformed packets that might trigger the dereference condition.

Public Exploit Available: No

Given the high impact on service availability, administrators should prioritize updating to version 1.7.18 immediately. Addressing this vulnerability is essential to maintaining the stability and reliability of the blockchain protocol infrastructure.