CVE-2021-37491

Опубликовано: 07 фев. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction() function.

Ссылки

http://dogecoin.com
Product
https://github.com/VPRLab/BlkVulnReport/blob/main/NDSS23_BlockScope.pdf
Exploit
Technical Description
https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3
Patch
https://github.com/dogecoin/dogecoin/blob/master/src/wallet/wallet.cpp#L2628-L2640
Exploit
https://github.com/dogecoin/dogecoin/issues/2279
Issue Tracking
Patch
http://dogecoin.com
Product
https://github.com/VPRLab/BlkVulnReport/blob/main/NDSS23_BlockScope.pdf
Exploit
Technical Description
https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3
Patch
https://github.com/dogecoin/dogecoin/blob/master/src/wallet/wallet.cpp#L2628-L2640
Exploit
https://github.com/dogecoin/dogecoin/issues/2279
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dogecoin:dogecoin:*:*:*:*:*:*:*:*

Версия до 1.14.3 (включая)

EPSS

Процентиль: 37%

0.00156

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2021-37491

CVSS3: 7.5

debian

около 3 лет назад

An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogec ...

GHSA-p6r5-q7gf-fc5p

CVSS3: 7.5

github

почти 3 года назад

An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction() function.

EPSS

Процентиль: 37%

0.00156

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo