CVE-2024-52922

In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification...

CVE-2019-25220

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service daemon crash via a flood of low-difficulty header chains aka a "Chain Width Expansion" attack because a node does not first verify that a presented chain has enough work before committing to store it...

CVE-2024-52919

Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure and daemon exit via a flood of addr messages...

CVE-2024-52915

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service memory consumption via a crafted INV message...

CVE-2024-52921

In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block...

CVE-2024-52919

Bitcoin Core versions prior to 22.0 are vulnerable to a CAddrMan nIdCount integer overflow caused by a flood of addr messages. This flaw triggers an assertion failure , leading to a daemon exit and a potential remote crash. To remediate, users should update to version 22.0 or later; for version 2...

CVE-2024-52919

Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure and daemon exit via a flood of addr messages...

CVE-2019-25220

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service daemon crash via a flood of low-difficulty header chains aka a "Chain Width Expansion" attack because a node does not first verify that a presented chain has enough work before committing to store it...

CVE-2024-52913

In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled...

CVE-2015-20111

miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a different vulnerability than CVE-2019-12107. In Bitcoin Core before 0.12, remote code execution was possible in...

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

CVE-2024-52915

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service memory consumption via a crafted INV message...

CVE-2024-52912

Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow calculating the time offset for newly connecting peers and an abs64 logic bug...

CVE-2024-52918

Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service memory consumption and application crash via a BIP21 r parameter for a URL that has a large file...

CVE-2024-52917

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device...

CVE-2024-52916

Bitcoin Core before 0.15.0 allows a denial of service OOM kill of a daemon process via a flood of minimum difficulty headers...

CVE-2015-20111

The miniupnp library, used in Bitcoin Core before version 0.12 and other products, is vulnerable to a buffer overflow and a significant data leak . The root cause is a lack of checks for snprintf return values in miniupnp versions prior to 4c90b87 . While the vulnerability itself causes a data le...

CVE-2024-52918

Bitcoin-Qt in Bitcoin Core versions prior to 0.20.0 is vulnerable to a denial of service (DoS) attack. A remote attacker can trigger excessive memory consumption and an application crash by exploiting a BIP21 r parameter associated with a URL containing a large file. To remediate this, users shou...

CVE-2024-52915

Bitcoin Core versions prior to 0.20.0 are vulnerable to a denial of service (DoS) attack. A remote attacker can trigger excessive memory consumption by sending a specially crafted INV message . To resolve this issue, it is recommended to update to version 0.20.0 or later. Exploitation details are...

CVE-2024-52916

Bitcoin Core versions prior to 0.15.0 are vulnerable to a denial of service (DoS) attack. The root cause is the allocation of resources without limits or throttling , where an attacker can flood the software with minimum difficulty headers . This causes an out-of-memory (OOM) condition, resulting...