ALT-PU-2017-2217

Высокий

ALT-PU-2017-2217: package bitcoin update to version 0.15.0-alt1

Источник

errata.altlinux.org

Дата публикации

17.09.2017

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades bitcoin to version 0.15.0-alt1.

Устраненные уязвимости5

CVE-2015-3641

Высокий 7.5

Дата публикации: 12.03.2020

bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application crash) via an "Easy" attack.

CVSS 3.1

Высокий 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2015-3641 https://nvd.nist.gov/vuln/detail/CVE-2015-3641

Ссылки1

ALT-PU-2017-2217 https://errata.altlinux.org/ALT-PU-2017-2217

Связанные уязвимости

CVE-2015-3641

CVSS3: 7.5

nvd

больше 6 лет назад

bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application crash) via an "Easy" attack.

CVE-2015-3641

CVSS3: 7.5

debian

больше 6 лет назад

bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a den ...

GHSA-jfw6-954q-w7rj

github

больше 4 лет назад

bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application crash) via an "Easy" attack.

CVE-2016-10724

CVSS3: 7.5

nvd

больше 8 лет назад

Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins.

CVE-2016-10724

CVSS3: 7.5

debian

больше 8 лет назад

Bitcoin Core before v0.13.0 allows denial of service (memory exhaustio ...