Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3401

Опубликовано: 04 фев. 2021
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer states "I believe that this vulnerability cannot actually be exploited."

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:bitcoin:bitcoin:*:*:*:*:*:*:*:*
Версия до 0.19.0 (исключая)

EPSS

Процентиль: 86%
0.03001
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-88

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 5 лет назад

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer states "I believe that this vulnerability cannot actually be exploited."

CVSS3: 9.8
debian
около 5 лет назад

Bitcoin Core before 0.19.0 might allow remote attackers to execute arb ...

CVSS3: 9.8
github
больше 3 лет назад

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer states "I believe that this vulnerability cannot actually be exploited."

EPSS

Процентиль: 86%
0.03001
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-88