CVE-2024-52912

Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow calculating the time offset for newly connecting peers and an abs64 logic bug...

CVE-2024-52922

In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification...

CVE-2024-52915: Allocation of Resources Without Limits or Throttling

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service memory consumption via a crafted INV message...

CVE-2024-52916: Allocation of Resources Without Limits or Throttling

Bitcoin Core before 0.15.0 allows a denial of service OOM kill of a daemon process via a flood of minimum difficulty headers...

CVE-2024-52918

Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service memory consumption and application crash via a BIP21 r parameter for a URL that has a large file...

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

CVE-2024-52918: Allocation of Resources Without Limits or Throttling

Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service memory consumption and application crash via a BIP21 r parameter for a URL that has a large file...

PT-2024-35481

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 0.21.0 Description: The issue allows an attacker to prevent a node from seeing a specific unconfirmed transaction due to mishandled transaction re-requests. Recommendations: For versions prior to 0.21.0, update ...

CVE-2019-25220: Allocation of Resources Without Limits or Throttling

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service daemon crash via a flood of low-difficulty header chains aka a "Chain Width Expansion" attack because a node does not first verify that a presented chain has enough work before committing to store it...

CVE-2024-52914

Bitcoin Core versions prior to 0.18.0 are vulnerable to a denial of service (DoS) condition. A node can be stalled for hours when processing the orphans of a specially crafted unconfirmed transaction . The root cause is related to the allocation of resources without limits or throttling (CWE-770)...

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in versions of Bitcoin Core prior to 0.18.0, which stems from the fact that nodes may stall for several hours while processing isolated blocks of specially crafted...

PT-2024-35482

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 0.18.0 Description: A node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction. This issue affects Bitcoin Core and can lead to a denial of service. Recommendations: For...

CVE-2024-52914

In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

CVE-2019-25220

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service daemon crash via a flood of low-difficulty header chains aka a "Chain Width Expansion" attack because a node does not first verify that a presented chain has enough work before committing to store it...

CVE-2024-52916

Bitcoin Core before 0.15.0 allows a denial of service OOM kill of a daemon process via a flood of minimum difficulty headers...

CVE-2024-52914

In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...

CVE-2015-20111: Buffer Copy without Checking Size of Input

miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a different vulnerability than CVE-2019-12107. In Bitcoin Core before 0.12, remote code execution was possible in...

CVE-2024-52921

In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block...

CVE-2024-52921

A security vulnerability exists in Bitcoin Core versions prior to 25.0 . A malicious peer can influence the download state of other peers by transmitting a mutated block , which can potentially disrupt the normal functioning of the Bitcoin network. To resolve this issue, users are recommended to ...