Описание
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command.
Ссылки
- Not Applicable
- Third Party Advisory
- Issue TrackingThird Party Advisory
- Third Party Advisory
- Not Applicable
- Third Party Advisory
- Issue TrackingThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
EPSS
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted ...
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command.
ALT-PU-2019-2361: package `bitcoin` update to version 0.18.1-alt1
EPSS
7.5 High
CVSS3
5 Medium
CVSS2