Lucene search

[email protected]CVE-2018-17145

HistorySep 10, 2020 - 5:15 p.m.

CVE-2018-17145

2020-09-1017:15:25

CWE-400

[email protected]

web.nvd.nist.gov

cve-2018-17145

bitcoin core

bitcoin knots

denial of service

invdos

cryptocurrency security

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON

Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.

Affected configurations

NVD

Node

bcoinbcoinRange<1.0.2

bitcoinbitcoin_coreRange0.16.0–0.16.2

bitcoinknotsbitcoin_knotsRange0.16.0–0.16.2

btcd_projectbtcdMatch0.3.0alpha

btcd_projectbtcdMatch0.3.1alpha

btcd_projectbtcdMatch0.3.2alpha

btcd_projectbtcdMatch0.3.3alpha

btcd_projectbtcdMatch0.4.0alpha

btcd_projectbtcdMatch0.5.0alpha

btcd_projectbtcdMatch0.6.0alpha

btcd_projectbtcdMatch0.7.0alpha

btcd_projectbtcdMatch0.8.0beta

btcd_projectbtcdMatch0.9.0beta

btcd_projectbtcdMatch0.10.0beta

btcd_projectbtcdMatch0.11.0beta

btcd_projectbtcdMatch0.11.1beta

btcd_projectbtcdMatch0.12.0beta

btcd_projectbtcdMatch0.13.0beta

btcd_projectbtcdMatch0.13.0beta2

btcd_projectbtcdMatch0.20.0beta

btcd_projectbtcdMatch0.20.1beta

decreddcrdRange<1.5.2

litecoinlitecoinRange0.16.0–0.16.2

namecoinnamecoin_coreRange0.16.0–0.16.2

CPENameOperatorVersion
bcoin:bcoinbcoinlt1.0.2
bitcoin:bitcoin_corebitcoin bitcoin corelt0.16.2
bitcoinknots:bitcoin_knotsbitcoinknots bitcoin knotslt0.16.2
btcd_project:btcdbtcd project btcdeq0.3.0
btcd_project:btcdbtcd project btcdeq0.3.1
btcd_project:btcdbtcd project btcdeq0.3.2
btcd_project:btcdbtcd project btcdeq0.3.3
btcd_project:btcdbtcd project btcdeq0.4.0
btcd_project:btcdbtcd project btcdeq0.5.0
btcd_project:btcdbtcd project btcdeq0.6.0

CPE	Name	Operator	Version
bcoin:bcoin	bcoin	lt	1.0.2
bitcoin:bitcoin_core	bitcoin bitcoin core	lt	0.16.2
bitcoinknots:bitcoin_knots	bitcoinknots bitcoin knots	lt	0.16.2
btcd_project:btcd	btcd project btcd	eq	0.3.0
btcd_project:btcd	btcd project btcd	eq	0.3.1
btcd_project:btcd	btcd project btcd	eq	0.3.2
btcd_project:btcd	btcd project btcd	eq	0.3.3
btcd_project:btcd	btcd project btcd	eq	0.4.0
btcd_project:btcd	btcd project btcd	eq	0.5.0
btcd_project:btcd	btcd project btcd	eq	0.6.0

Rows per page:

1-10 of 231

References

en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-17145

github.com/bitcoin/bitcoin/blob/v0.16.2/doc/release-notes.md

invdos.net

invdos.net/paper/CVE-2018-17145.pdf

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON

Related for CVE-2018-17145

osv2 prion1 cvelist1 debiancve1 github1 veracode1 nvd1