Описание
Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Mailing List
Уязвимые конфигурации
EPSS
7.5 High
CVSS3
Дефекты
Связанные уязвимости
Bitcoin Core before 24.0.1 allows remote attackers to cause a denial o ...
Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.
ALT-PU-2022-7753: package `bitcoin` update to version 24.0.1-alt1
ALT-PU-2024-15200: package `bitcoin` update to version 27.2-alt0.p10.1
EPSS
7.5 High
CVSS3