Unspecified Vulnerabilities in bitcoind and Bitcoin-Qt

Bitcoin Bitcoin-qt and Bitcoin Bitcoind are both products of the Bitcoin organization.Bitcoin Bitcoin-qt is a bitcoin client developed using QT.Bitcoin Bitcoind is an interface-less bitcoin client. A security vulnerability exists in bitcoind and Bitcoin-Qt versions prior to 0.17.1, which can be...

bitcoind and Bitcoin-Qt buffer overflow vulnerabilities

Bitcoin Bitcoin-qt and Bitcoin Bitcoind are both products of the Bitcoin organization.Bitcoin Bitcoin-qt is a bitcoin client developed using QT.Bitcoin Bitcoind is an interface-less bitcoin client. A buffer overflow vulnerability exists in bitcoind and Bitcoin-Qt versions prior to 0.15.1. The...

Unspecified vulnerability in bitcoind and Bitcoin-Qt (CNVD-2021-27992)

Bitcoin Bitcoin-qt and Bitcoin Bitcoind are both products of the Bitcoin organization.Bitcoin Bitcoin-qt is a bitcoin client developed using QT.Bitcoin Bitcoind is an interface-less bitcoin client. A security vulnerability exists in bitcoind and Bitcoin-Qt versions prior to 0.10.2, which can be...

CVE-2017-18350

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name...

CVE-2017-18350

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name...

CVE-2015-3641

bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service disabled functionality such as a client application crash via an "Easy" attack...

Code injection

bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call...

Design/Logic Flaw

bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service disabled functionality such as a client application crash via an "Easy" attack...

Stack overflow

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name...

Researchers Warn of Novel PXJ Ransomware Strain

Researchers have discovered a new strain of ransomware, dubbed “PXJ,” which emerged in the wild in early 2020. While PXJ performs functions similar to other ransomware variants, it does not appear to share the same underlying code with most known ransomware families, researchers said. They first...

CVE-2015-3641

Removed by vendor...

CVE-2015-3641

CVE-2015-3641 affects bitcoind and Bitcoin-Qt prior to 0.10.2, allowing a denial-of-service via an “Easy” attack (attackers could disable functionality or crash the client). Connected sources indicate the vulnerability is tied to older Bitcoin Core versions and that mitigation is to upgrade to ve...

CVE-2015-3641

bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service disabled functionality such as a client application crash via an "Easy" attack...

CVE-2018-20586

bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call...

CVE-2018-20586

CVE-2018-20586 affects bitcoind and Bitcoin-Qt prior to 0.17.1, where an RPC call can inject arbitrary data into the debug log. Affected component: Bitcoin Core’s RPC/debug logging. Root cause: ability to write arbitrary data via RPC into logs. Impact: log contents could be polluted with attacker...

CVE-2017-18350

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name...

CVE-2017-18350

Affected software: bitcoind and Bitcoin-Qt prior to 0.15.1. Issue: a stack-based buffer overflow caused by a signedness error when a attacker-controlled SOCKS proxy responds with an acknowledgement to an unexpected domain name. Impact details are consistent with the CVE, including a partial avail...

CVE-2017-18350

Removed by vendor...

A week in security (February 10 – 16)

Last week on Malwarebytes Labs, we explained how to battle online coronavirus scams with facts, discussed the persistent re-infection techniques of Android/Trojan.xHelper and how to remove it, provided cyber tips for safe online dating, and showed how Hollywood teaches us misleading cybersecurity...

Hacker Scheme Threatens AdSense Customers with Account Suspension

A new e-mail based extortion attack threatens users of Google’s AdSense banner-ad program with creating online behavior that will warrant them an account suspension—perhaps a permanent one–from Google if they don’t pay the attackers in bitcoin. The scam—revealed in a post by security writer and...