Описание
Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023.
Ссылки
- Not Applicable
- Release Notes
- Issue Tracking
- Issue Tracking
- Issue TrackingPatch
- Not Applicable
- Release Notes
- Issue Tracking
- Issue Tracking
- Issue TrackingPatch
Уязвимые конфигурации
Конфигурация 1Версия до 24.1 (исключая)
cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.014
Низкий
7.5 High
CVSS3
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 7.5
debian
больше 3 лет назад
Bitcoin Core before 24.1, when debug mode is not used, allows attacker ...
CVSS3: 7.5
github
больше 3 лет назад
Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023.
CVSS3: 7.5
altlinux
больше 3 лет назад
ALT-PU-2023-1884: package `bitcoin` update to version 25.0-alt1
CVSS3: 7.5
altlinux
почти 2 года назад
ALT-PU-2024-15200: package `bitcoin` update to version 27.2-alt0.p10.1
EPSS
Процентиль: 73%
0.014
Низкий
7.5 High
CVSS3
Дефекты
CWE-400