Описание
Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message that are not committed to in a block's merkle root. FillBlock can be called twice for one PartiallyDownloadedBlock instance.
Ссылки
- PatchVendor Advisory
- Third Party Advisory
- Release Notes
- Issue Tracking
- Release Notes
Уязвимые конфигурации
EPSS
7.5 High
CVSS3
Дефекты
Связанные уязвимости
Bitcoin Core before 25.0 allows remote attackers to cause a denial of ...
Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message that are not committed to in a block's merkle root. FillBlock can be called twice for one PartiallyDownloadedBlock instance.
ALT-PU-2023-1884: package `bitcoin` update to version 25.0-alt1
ALT-PU-2024-15200: package `bitcoin` update to version 27.2-alt0.p10.1
EPSS
7.5 High
CVSS3