Описание
In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bitcoin Knots project, some others consider it "not a bug."
Ссылки
- Third Party Advisory
- Issue Tracking
- Product
- Release Notes
- Issue TrackingThird Party Advisory
- Third Party Advisory
- Issue Tracking
- Product
- Release Notes
- Issue TrackingThird Party Advisory
Уязвимые конфигурации
Одно из
EPSS
5.3 Medium
CVSS3
Дефекты
Связанные уязвимости
In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots202311 ...
In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023.
ALT-PU-2024-4529: package `bitcoin` update to version 26.1-alt1
ALT-PU-2024-15200: package `bitcoin` update to version 27.2-alt0.p10.1
EPSS
5.3 Medium
CVSS3