PT-2013-3639

Name of the Vulnerable Software and Affected Versions bitcoind and Bitcoin-Qt versions 0.8.0 and earlier Description The issue allows remote attackers to cause a denial of service by mining a block to create a nonstandard Bitcoin transaction containing multiple OP CHECKSIG script opcodes, leading...

PT-2013-3640

Name of the Vulnerable Software and Affected Versions Bitcoin-Qt versions prior to 0.8.0rc1 bitcoind versions prior to 0.8.0rc1 Description The issue allows remote attackers to cause a denial of service by consuming disk I/O via a Bitcoin transaction with many inputs corresponding to different...

PT-2013-3634

Name of the Vulnerable Software and Affected Versions bitcoind and Bitcoin-Qt versions 0.4.9rc1 and earlier, 0.5.x versions prior to 0.5.8rc1, 0.6.0 versions prior to 0.6.0.11rc1, 0.6.1 through 0.6.5 versions prior to 0.6.5rc1, 0.7.x versions prior to 0.7.3rc1 Description The issue makes it easie...

CVE-2013-2273: Exposure of Sensitive Information to an Unauthorized Actor

bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote attackers to obtain potentially sensitive information about returned change by leveraging certain predictability in th...

CVE-2013-2292: Undefined Security Weakness

bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service electricity consumption by mining a block to create a nonstandard Bitcoin transaction containing multiple OPCHECKSIG script opcodes...

PT-2013-3633

Name of the Vulnerable Software and Affected Versions bitcoind versions prior to 0.4.9rc1 bitcoind versions 0.5.x prior to 0.5.8rc1 bitcoind versions 0.6.0 prior to 0.6.0.11rc1 bitcoind versions 0.6.1 through 0.6.5 prior to 0.6.5rc1 bitcoind versions 0.7.x prior to 0.7.3rc1 Bitcoin-Qt versions...

CVE-2013-2293: Undefined Security Weakness

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service disk I/O consumption via a Bitcoin transaction with many inputs...

CVE-2012-4684: Undefined Security Weakness

The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service resource consumption via a valid modified signature for a...

CVE-2013-2272: Exposure of Sensitive Information to an Unauthorized Actor

The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet...

Fedora Update for qt FEDORA-2013-1997

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for qt FEDORA-2013-1997

Check for the Version of qt OpenVAS Vulnerability Test Fedora Update for qt FEDORA-2013-1997 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Fedora 17 : qt-4.8.4-11.fc17 (2013-1997)

it fixes security flaw was found in the way QSharedMemory class, CVE-2013-0254 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Design/Logic Flaw

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application...

CVE-2012-5624

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application...

CVE-2012-6093

The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fai...

CVE-2012-5624

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application...

CVE-2012-5624

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application...

CVE-2012-5624

Removed by vendor...

CVE-2012-6093

Removed by vendor...

CVE-2012-6093

The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fai...