CVE-2019-25220

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service daemon crash via a flood of low-difficulty header chains aka a "Chain Width Expansion" attack because a node does not first verify that a presented chain has enough work before committing to store it...

CVE-2019-25220

Bitcoin Core versions prior to 24.0.1 are vulnerable to a denial of service (daemon crash) caused by a "Chain Width Expansion" attack. The root cause is a failure to verify that a presented chain contains sufficient work before the node commits to storing it. Remote attackers can exploit this by ...