Lucene search

GoogleOSV:CVE-2021-37492

HistoryFeb 07, 2023 - 9:15 p.m.

CVE-2021-37492

2023-02-0721:15:09

Google

osv.dev

ravencoin

security

vulnerability

information exposure

software

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

40.6%

JSON

An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll() function.

CPENameOperatorVersion
bitcoineq0.3.8
bitcoineq0.7.1
bitcoineq2.2.2
bitcoineq0.3.3
bitcoineq2.1.1
bitcoineq0.2.10
bitcoineq4.3.2
bitcoineq0.7.0rc1
bitcoineq0.6.0rc1
bitcoineq0.4.00rc2

Name	Operator	Version
bitcoin	eq	0.3.8
bitcoin	eq	0.7.1
bitcoin	eq	2.2.2
bitcoin	eq	0.3.3
bitcoin	eq	2.1.1
bitcoin	eq	0.2.10
bitcoin	eq	4.3.2
bitcoin	eq	0.7.0rc1
bitcoin	eq	0.6.0rc1
bitcoin	eq	0.4.00rc2

Rows per page:

1-10 of 1191

References

ravencoin.com

github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3

github.com/RavenProject/Ravencoin/blob/master/src/wallet/wallet.cpp#L3657-L3671

github.com/RavenProject/Ravencoin/issues/1086

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

40.6%

JSON

Related for OSV:CVE-2021-37492