bitcoind and Bitcoin-Qt permissions licenses and access controls

A security vulnerability exists in bitcoind and Bitcoin-Qt versions 0.8.0 to 0.8.0:rc1, which stems from the program's failure to implement protocol rules for certain blocks. A remote attacker could exploit the vulnerability to bypass established access restrictions and perform a double-spending...

Bitcoind and Bitcoin-Qt Bloom Filter Implementations for Input Validation

A denial of service vulnerability exists in the Bloom Filter implementation in Bitcoind and Bitcoin-Qt versions 0.8.x prior to 0.8.4rc1. A remote attacker can exploit this vulnerability to cause a denial of service except for zero errors and process crashes via a specially crafted message sequenc...

Bitcoin Core and Bitcoin Knots Security Vulnerabilities

Bitcoin is an e-currency created with open source P2P software. A security vulnerability exists in Bitcoin Core and Bitcoin Knots. The following products and versions are affected: Bitcoin Core version 0.14.x prior to 0.14.3, 0.15.x prior to 0.15.2, and 0.16.x prior to 0.16.3; and Bitcoin Knots...

BCH public chain OP_CHECKDATASIG suffers from a logic flaw vulnerability

The attack payload is a precisely constructed P2SH Transaction that utilizes the OPCHECKDATASIG opcode introduced by the BCH upgrade last November. The attack payload has a SigOP count of 1334 15 = 20010, and this attack payload TX is rejected by the node with an error of too many sigops, which i...

bitcoind/Bitcoin-Qt/wxBitcoin Resource Management Errors

Bitcoin is an electronic currency created with open source P2P software. A vulnerability exists in bitcoind and Bitcoin-Qt, wxBitcoin, which stems from the program not taking into account that block sizes may require more database locks. A remote attacker could exploit the vulnerability by...

Bitcoin Core & Knots Incorrect Access Controls

Bitcoin Core is an open source client for verifying the validity of blockchain transactions. Bitcoin Knots is a complete Bitcoin client. An access control error vulnerability exists in Bitcoin Core versions 0.12.0 through 0.17.1 and Bitcoin Knots versions 0.12.0 through 0.17.1.knots prior to...

Bitcoin Core and Bitcoin Knots Security Vulnerabilities

Bitcoin is an electronic currency created with open source P2P software. A security vulnerability exists in Bitcoin Core versions prior to 0.13.0, Bitcoin Knots versions prior to 0.13.0.knots20160814, and other tokens, which stems from an incorrect execution order. An attacker could use the...

Bitcoind/Bitcoin-Qt Unspecified Security

Bitcoin is an e-currency created with open source P2P software. An unspecified vulnerability exists in Bitcoind and Bitcoin-Qt. A remote attacker could exploit this vulnerability to cause a denial of service via unknown vectors...

Bitcoin Red has a logic flaw vulnerability

Bitcoin Red BTCR is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'distributeBTR' function in BTCR's smart contract implementation. An attacker can exploit the vulnerability to increase the balance of their own account...

Bitcoin Knots Has a Logic Flaw Vulnerability

A security vulnerability exists in Bitcoin Knots versions v0.11.0.ljr20150711 through v0.13.0.knots20160814, which stems from the program storing sensitive information containing private keys and wallet passwords in the debug console. An attacker can exploit the vulnerability to obtain sensitive...

Logic Flaw Vulnerability in Bitcoin Core and Bitcoin Knots

Bitcoin is an electronic currency created with open source P2P software. A security vulnerability exists in Bitcoin Core versions prior to 0.13.0, Bitcoin Knots versions prior to 0.13.0.knots20160814 and other tokens. An attacker could exploit this vulnerability to cause a denial of service memor...

Bitcoin Core and Bitcoin Knots Access Control Errors

Bitcoin is an electronic currency created with open source P2P software. An access control error vulnerability exists in Bitcoin Core versions 0.12.0 through 0.17.1 and Bitcoin Knots versions 0.12.0 through 0.17.1.knots prior to 20181229. A local attacker can exploit the vulnerability to steal a...

Leaf Node Weaknesses in Bitcoin Merkle Tree Designs

Merkle tree in Chinese is called Merkle tree, is a kind of tree in computer data structure. The vulnerability stems from certain weaknesses in the design of leaf nodes in a Merkle tree. An attacker can exploit this vulnerability to modify arbitrary payment amounts...

Logic flaw vulnerability in bitcoind and Bitcoin-Qt

A security vulnerability exists in bitcoind and Bitcoin-Qt 0.8.x versions. A remote attacker could exploit this vulnerability to cause a denial of service memory exhaustion via a large amount of tx message data...

bitcoind/Bitcoin-Qt Denial of Service

Bitcoin is an electronic currency created with open source P2P software. Unspecified vulnerabilities in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6.0.x before 0.6.0.7, and 0.6.x before 0.6.2 can be exploited by a remote attacker to cause a denial of service blocking-processing...

BTC Public Chain Log Injection Vulnerability

Bitcoin is an e-currency created with open source P2P software. A security vulnerability exists in bitcoind and Bitcoin-Qt versions prior to 0.17.1. An attacker can exploit the vulnerability by injecting arbitrary data into debug logs with the help of RPC calls...

Bitcoind/Bitcoin-Qt Denial of Service

Bitcoin is an e-currency created with open source P2P software. An unspecified vulnerability exists in Bitcoind and Bitcoin-Qt. A remote attacker could exploit this vulnerability to cause a denial of service via unknown vectors...

Bitcoind/Bitcoin-Qt Unspecified Security

Bitcoin is an electronic currency created with open source P2P software. An unspecified vulnerability exists in Bitcoind and Bitcoin-Qt versions prior to 0.4.7rc3, 0.5.x versions prior to 0.5.6rc3, 0.6.0.x versions prior to 0.6.0.9rc1, and 0.6.x versions prior to 0.6.3rc1. A remote attacker could...

bitcoind/Bitcoin-Qt 'CTransaction::FetchInputs' method denied service

Bitcoin is an e-currency generated using open source P2P software. A vulnerability in the 'CTransaction::FetchInputs' method in bitcoind and Bitcoin-Qt versions prior to 0.8.0rc1 stems from the program's failure to incrementally check the consumed predecessor signals, i.e., copying transactions...

What to do when you receive an extortion email

In the last few weeks, there has been an upswing in people receiving threatening, extortion email messages, demanding payment to avoid release of sensitive information. Most of the time, these emails are what we call "sextortion" emails, as they claim that malware on your computer has captured...