CVE-2024-35202

Опубликовано: 10 окт. 2024

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message that are not committed to in a block's merkle root. FillBlock can be called twice for one PartiallyDownloadedBlock instance.

Ссылки

https://bitcoincore.org/en/2024/10/08/disclose-blocktxn-crash/
Patch
Vendor Advisory
https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
Third Party Advisory
https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-25.0.md
Release Notes
https://github.com/bitcoin/bitcoin/pull/26898
Issue Tracking
https://github.com/bitcoin/bitcoin/releases/tag/v25.0
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*

Версия до 25.0 (исключая)

EPSS

Процентиль: 85%

0.02464

Низкий

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVE-2024-35202

CVSS3: 7.5

debian

больше 1 года назад

Bitcoin Core before 25.0 allows remote attackers to cause a denial of ...

GHSA-53v9-6jr7-7fxh

CVSS3: 7.5

github

больше 1 года назад

EPSS

Процентиль: 85%

0.02464

Низкий

7.5 High

CVSS3

Дефекты

CWE-770