Lucene search

[email protected]NVD:CVE-2013-2293

HistoryMar 12, 2013 - 11:28 a.m.

CVE-2013-2293

2013-03-1211:28:18

CWE-399

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.5%

JSON

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O consumption) via a Bitcoin transaction with many inputs corresponding to many different parts of the stored block chain.

Affected configurations

NVD

Node

bitcoinbitcoin-qtMatch0.4rc4

bitcoinbitcoin-qtMatch0.4.8rc4

bitcoinbitcoin-qtMatch0.5.0rc1

bitcoinbitcoin-qtMatch0.5.0.4

bitcoinbitcoin-qtMatch0.5.1rc1

bitcoinbitcoin-qtMatch0.5.3.0

bitcoinbitcoin-qtMatch0.5.7

bitcoinbitcoin-qtMatch0.6.0.10rc4

bitcoinbitcoin-qtMatch0.6.3

bitcoinbitcoin-qtMatch0.7.0rc1

bitcoinbitcoin-qtMatch0.7.1

bitcoinbitcoin_core

bitcoinbitcoin_coreRange≤0.7.2

bitcoinbitcoin_coreMatch0.3.4

bitcoinbitcoin_coreMatch0.3.5

bitcoinbitcoin_coreMatch0.3.8

bitcoinbitcoin_coreMatch0.3.10

bitcoinbitcoin_coreMatch0.3.11

bitcoinbitcoin_coreMatch0.3.12

bitcoinbitcoin_coreMatch0.4.0

bitcoinbitcoin_coreMatch0.4.1

bitcoinbitcoin_coreMatch0.4.1rc6

bitcoinbitcoin_coreMatch0.4.2

bitcoinbitcoin_coreMatch0.4.3

bitcoinbitcoin_coreMatch0.4.4

bitcoinbitcoin_coreMatch0.4.4rc2

bitcoinbitcoin_coreMatch0.4.5

bitcoinbitcoin_coreMatch0.4.6

bitcoinbitcoin_coreMatch0.4.7rc2

bitcoinbitcoin_coreMatch0.5.0rc

bitcoinbitcoin_coreMatch0.5.3

bitcoinbitcoin_coreMatch0.5.3.1

bitcoinbitcoin_coreMatch0.5.4

bitcoinbitcoin_coreMatch0.5.5

bitcoinbitcoin_coreMatch0.5.6rc2

bitcoinbitcoin_coreMatch0.6.0.1

bitcoinbitcoin_coreMatch0.6.0.2

bitcoinbitcoin_coreMatch0.6.0.3

bitcoinbitcoin_coreMatch0.6.0.4

bitcoinbitcoin_coreMatch0.6.0.5

bitcoinbitcoin_coreMatch0.6.0.6

bitcoinbitcoin_coreMatch0.6.0.7

bitcoinbitcoin_coreMatch0.6.0.8

bitcoinbitcoin_coreMatch0.6.1

bitcoinbitcoin_coreMatch0.6.2

bitcoinbitcoindMatch0.4.4rc4

bitcoinbitcoindMatch0.5.7

bitcoinbitcoindMatch0.6.0.0

bitcoinbitcoindMatch0.6.0.10rc4

bitcoinbitcoindMatch0.6.3

bitcoinbitcoindMatch0.6.4rc4

bitcoinbitcoindMatch0.7.0rc1

bitcoinbitcoindMatch0.7.1

References

bitcointalk.org/?topic=144122

en.bitcoin.it/wiki/CVE-2013-2293

en.bitcoin.it/wiki/CVEs

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.5%

JSON

Related for NVD:CVE-2013-2293

debiancve1 cve1 cvelist1 prion1