Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-px5f-j76h-8w39

Опубликовано: 18 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.

EPSS

Процентиль: 57%
0.00817
Низкий

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.

CVSS3: 7.5
debian
почти 2 года назад

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial o ...

CVSS3: 7.5
altlinux
почти 4 года назад

ALT-PU-2022-7753: package `bitcoin` update to version 24.0.1-alt1

CVSS3: 7.5
altlinux
почти 2 года назад

ALT-PU-2024-15200: package `bitcoin` update to version 27.2-alt0.p10.1

EPSS

Процентиль: 57%
0.00817
Низкий

7.5 High

CVSS3

Дефекты

CWE-770