Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-px5f-j76h-8w39

Опубликовано: 18 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.

EPSS

Процентиль: 76%
0.00938
Низкий

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
nvd
около 1 года назад

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.

CVSS3: 7.5
debian
около 1 года назад

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial o ...

EPSS

Процентиль: 76%
0.00938
Низкий

7.5 High

CVSS3

Дефекты

CWE-770