CVE-2024-52917: Allocation of Resources Without Limits or Throttling

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device...

CVE-2019-25220

Bitcoin Core versions before 24.0.1 are vulnerable to a denial of service (daemon crash) due to a Chain Width Expansion attack. The root cause is that the node fails to verify if a presented chain has sufficient work before committing to store it, allowing a remote attacker to crash the service b...

CVE-2024-52913

In Bitcoin Core versions prior to 0.21.0 , a vulnerability exists where an attacker can prevent a node from seeing a specific unconfirmed transaction. This is caused by the mishandling of transaction re-requests , which can lead to the omission of specific transactions from the node's view. A pro...

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core versions prior to 0.20.0. A remote attacker exploiting this vulnerability could cause a denial of service infinite loop via a malformed GETDATA messa...

CVE-2024-52918

Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service memory consumption and application crash via a BIP21 r parameter for a URL that has a large file...

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in versions of Bitcoin Core prior to 25.1. An attacker exploiting the vulnerability could cause a node to fail to download the latest block...

CVE-2024-52922

In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification...

CVE-2024-52922

In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification...

CVE-2024-52922

In Bitcoin Core versions prior to 25.1 , an attacker can cause a node to fail to download the latest block. The root cause is a delay of several minutes that occurs when an announcing peer stalls instead of adhering to the peer-to-peer protocol specification . To resolve this issue, users are rec...

PT-2024-35490 · Unknown · Bitcoin Core

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 25.1 Description: The issue allows an attacker to cause a node to not download the latest block. This can happen due to minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer...

CVE-2024-52922

In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification...

CVE-2024-52922: Undefined Security Weakness

In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification...

PT-2024-10751

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions prior to 24.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a flood of low-difficulty header chains, also known as a "Chain Width Expansion" attack. This...

CVE-2024-52919: Integer Overflow or Wraparound

Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure and daemon exit via a flood of addr messages...

CVE-2024-52912

Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow calculating the time offset for newly connecting peers and an abs64 logic bug...

PT-2024-35486

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 0.20.0 Description: The issue allows remote attackers to cause a denial of service, resulting in memory consumption and application crash. This is achieved via a BIP21 r parameter for a URL that has a large file...

CVE-2024-52921

In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block...

CVE-2024-52917

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device...

CVE-2024-52919

Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure and daemon exit via a flood of addr messages...

CVE-2024-52922

In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification...