127 matches found
EUVD-2012-3736
Malware in sbrugna...
EUVD-2012-4609
Malware in sbrugna...
EUVD-2012-4607
Malware in sbrugna...
EUVD-2012-4608
Malware in sbrugna...
EUVD-2018-13139
Malware in sbrugna...
EUVD-2013-4090
Malware in sbrugna...
EUVD-2013-2239
Malware in sbrugna...
EUVD-2011-4376
Malware in sbrugna...
CVE-2018-20586
bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call...
CVE-2013-4165
The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack...
CVE-2017-18350
bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name...
CVE-2010-5137
wxBitcoin and bitcoind before 0.3.5 allow remote attackers to cause a denial of service daemon crash via a Bitcoin transaction containing an OPLSHIFT script opcode...
SUSE CVE-2018-17144
Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service application crash exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash...
CVE-2021-3195
bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory e.g., outside the /.bitcoin directory via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented...
Design/Logic Flaw
DISPUTED bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory e.g., outside the /.bitcoin directory via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has...
CVE-2021-3195
bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory e.g., outside the /.bitcoin directory via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented...
CVE-2021-3195
Summary: CVE-2021-3195 affects Bitcoin Core (bitcoind) up to version 0.21.0, where a dumpwallet RPC call can create a new file in an arbitrary directory (e.g., outside ~/.bitcoin). This behavior is described as potentially violating the security model of forks with dumpwallet restrictions, though...
CVE-2021-3195
bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory e.g., outside the /.bitcoin directory via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented...
Malicious Package in bictoind-rpc
All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...
GHSA-JQVV-R4W3-8F7W Malicious Package in bictoind-rpc
All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...