Design/Logic Flaw

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service disk I/O consumption via a Bitcoin transaction with many inputs...

CVE-2013-2293

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service disk I/O consumption via a Bitcoin transaction with many inputs...

CVE-2013-2272

The CVE-2013-2272 entry affects bitcoind and Bitcoin-Qt versions listed as vulnerable (before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1–0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1) in the penny-flooding protection of CTxMemPool::accept. The issue allows remote attacker...

CVE-2013-2273

bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote attackers to obtain potentially sensitive information about returned change by leveraging certain predictability in th...

CVE-2012-4684

The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service resource consumption via a valid modified signature for a...

CVE-2012-4684

CVE-2012-4684 affects Bitcoin Core (bitcoind/Bitcoin-Qt) prior to 0.7.0. The alert functionality accepts different character representations of the same signature data but relies on a hash of the signature, enabling a remote attacker to trigger a denial-of-service (resource consumption) by sendin...

CVE-2013-2292

Removed by vendor...

CVE-2013-2273

Removed by vendor...

CVE-2013-2293

Removed by vendor...

CVE-2013-2272

Removed by vendor...

CVE-2012-4684

Removed by vendor...

CVE-2013-2293

The CVE-2013-2293 issue affects bitcoind and Bitcoin-Qt prior to 0.8.0rc1. The CTransaction::FetchInputs function copies transactions from disk to memory without incrementally validating spent prevouts, enabling remote attackers to trigger a denial of service through a transaction with many input...

CVE-2013-2292

CVE-2013-2292 affects bitcoind and Bitcoin-Qt 0.8.0 and earlier. The underlying issue is a DoS condition caused by mining a block that creates a nonstandard Bitcoin transaction containing multiple OP_CHECKSIG script opcodes. This block-level crafting can lead to electricity consumption as a conse...

CVE-2013-2273

CVE-2013-2273 affects bitcoind/Bitcoin-Qt releases prior to specific 0.4.9rc1, 0.5.x prior to 0.5.8rc1, 0.6.x prior to 0.6.0.11rc1, 0.6.1–0.6.5 prior to 0.6.5rc1, and 0.7.x prior to 0.7.3rc1. The issue allows remote attackers to obtain potentially sensitive information about the transaction chang...

CVE-2013-2272

The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet...

CVE-2013-2293

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service disk I/O consumption via a Bitcoin transaction with many inputs...

CVE-2013-2292

bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service electricity consumption by mining a block to create a nonstandard Bitcoin transaction containing multiple OPCHECKSIG script opcodes...

PT-2013-3633

Name of the Vulnerable Software and Affected Versions bitcoind versions prior to 0.4.9rc1 bitcoind versions 0.5.x prior to 0.5.8rc1 bitcoind versions 0.6.0 prior to 0.6.0.11rc1 bitcoind versions 0.6.1 through 0.6.5 prior to 0.6.5rc1 bitcoind versions 0.7.x prior to 0.7.3rc1 Bitcoin-Qt versions...

PT-2013-1693

Name of the Vulnerable Software and Affected Versions bitcoind and Bitcoin-Qt versions prior to 0.7.0 Description The issue concerns the alert functionality in the affected software, which improperly handles different character representations of the same signature data. It relies on a hash of th...

PT-2013-3634

Name of the Vulnerable Software and Affected Versions bitcoind and Bitcoin-Qt versions 0.4.9rc1 and earlier, 0.5.x versions prior to 0.5.8rc1, 0.6.0 versions prior to 0.6.0.11rc1, 0.6.1 through 0.6.5 versions prior to 0.6.5rc1, 0.7.x versions prior to 0.7.3rc1 Description The issue makes it easie...