Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3270
HistoryJan 11, 2017 - 6:22 a.m.

Denial Of Service (DoS)

2017-01-1106:22:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.004 Low

EPSS

Percentile

73.8%

bitcoin-ruby is vulnerable to denial of service (DoS) attacks. There is a flaw in the Merkle hash implementation that Bitcoin uses to calculate the Merkle root in a block header. Block hash collisions can easily be made by duplicating transactions in the Merkle tree. A record collision would prevent the acceptance of a legitimate block with the same hash. This could be used to isolate a victim’s node and cause the creation of blockchain forks.

CPENameOperatorVersion
bitcoin-rubyeq0.0.1

0.004 Low

EPSS

Percentile

73.8%