Lucene search
PRIOn knowledge basePRION:CVE-2023-50428HistoryDec 09, 2023 - 7:15 p.m.
Code injection
2023-12-0919:15:00
PRIOn knowledge base
www.prio-n.com
6
bitcoin core
bitcoin knots
data injection
bypassing
code obfuscation
inscriptions
vulnerability
In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bitcoin Knots project, some others consider it “not a bug.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| bitcoin_core | ge | 0.9 | |
| bitcoin_core | le | 26.0 | |
| bitcoin_knots | ge | 0.9 | |
| bitcoin_knots | lt | 25.1 |
References
en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
github.com/bitcoin/bitcoin/blob/65c05db660b2ca1d0076b0d8573a6760b3228068/src/kernel/mempool_options.h
github.com/bitcoin/bitcoin/pull/28408
github.com/bitcoin/bitcoin/tags
github.com/bitcoinknots/bitcoin/blob/aed49ce8989334c364a219a6eb016a3897d4e3d7/doc/release-notes.md
twitter.com/LukeDashjr/status/1732204937466032285
Related
nvd
nvd
CVE-2023-50428
2023-12-09 19:15:07
CVE-2024-34149
2024-04-30 23:15:06
cvelist
cvelist
CVE-2023-50428
2023-12-09 00:00:00
CVE-2024-34149
2024-04-30 00:00:00
cve
cve
CVE-2023-50428
2023-12-09 19:15:07
CVE-2024-34149
2024-04-30 23:15:06