ALT-PU-2019-1759

Высокий

ALT-PU-2019-1759: package bitcoin update to version 0.18.0-alt1

Источник

errata.altlinux.org

Дата публикации

02.05.2019

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades bitcoin to version 0.18.0-alt1.

Устраненные уязвимости2

CVE-2018-20587

Средний 5.5

Дата публикации: 11.02.2019

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port.

CVSS 3.0

Средний 5.5

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack vector: Local
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: High
Availability: None

CVSS 2.0

Низкий 2.1

AV:L/AC:L/Au:N/C:N/I:P/A:N

Access vector: Local
Complexity: Low
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Ссылки

CVE-2018-20587 https://nvd.nist.gov/vuln/detail/CVE-2018-20587

Ссылки1

ALT-PU-2019-1759 https://errata.altlinux.org/ALT-PU-2019-1759

Связанные уязвимости

CVE-2024-52914

CVSS3: 7.5

nvd

почти 2 года назад

In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction.

CVE-2024-52914

CVSS3: 7.5

debian

почти 2 года назад

In Bitcoin Core before 0.18.0, a node could be stalled for hours when ...

CVE-2018-20587

CVSS3: 5.5

ubuntu

больше 7 лет назад

CVE-2018-20587

CVSS3: 5.5

nvd

больше 7 лет назад

CVE-2018-20587

CVSS3: 5.5

debian

больше 7 лет назад

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0. ...