Описание
Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Mailing List
Уязвимые конфигурации
Конфигурация 1Версия до 24.0.1 (исключая)
cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.00938
Низкий
7.5 High
CVSS3
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 7.5
debian
около 1 года назад
Bitcoin Core before 24.0.1 allows remote attackers to cause a denial o ...
CVSS3: 7.5
github
около 1 года назад
Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.
EPSS
Процентиль: 76%
0.00938
Низкий
7.5 High
CVSS3
Дефекты
CWE-770