TALOS Vulnerability Spotlight: Multiple Vulnerabilities in the CPP and Parity Ethereum Client

Parity have already responded:

https://twitter.com/ParityTech/status/950808387553546242

The report says that GO ethereum (Geth/MIST from EF) doesn't have the issues. Let's hope Parity can patch this stuff quickly. Here's the actual report from Talos: http://blog.talosintelligence.com/2018/01/vulnerability-spotlight-multiple.html

Hmm not sec expert here but this part scare me a bit:

CVE-2017-14457

Improper handling of smart contract code in the create2 opcode handler can lead to a denial of service. An attacker could hand over a huge amount of data to the SHA1 function which would take a long time for computation. The vulnerability can be used to perform a denial of service attack on all nodes in the Ethereum network using this implementation of the virtual machine library function.

Someone can explain the possible consequence of those vulnerability for the live network ? Could this be the cause of the last days of "gas problem" and "congestion" that seems a bit weird or it was just normal traffic on the network ?

Isn't the CORS vulnerability roughly the same as the one affecting Electrum?

[removed]