Bitcoin Core vulnerabilities, page 3
52 vulnerabilities
Known vulnerabilities in Bitcoin Core, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2013-2272bitcoin · bitcoin_core +2 morebitcoin bitcoin_coreThe penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet addresses and IP addresses via a series of large Bitcoin transactions with insufficient fees.CVSS5.0MediumEPSS1.89%RoutineCVE-2012-4684bitcoin · bitcoin_core +3 morebitcoin bitcoin_coreThe alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service (resource consumption) via a valid modified signature for a circulating alert.CVSS7.8HighEPSS2.86%RoutineCVE-2012-3789bitcoin · bitcoin_corebitcoin bitcoin_coreUnspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.7rc3, 0.5.x before 0.5.6rc3, 0.6.0.x before 0.6.0.9rc1, and 0.6.x before 0.6.3rc1 allows remote attackers to cause a denial of service (process hang) via unknown behavior on a Bitcoin network.CVSS5.0MediumEPSS1.97%RoutineCVE-2012-2459bitcoin · bitcoin_corebitcoin bitcoin_coreUnspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6.0.x before 0.6.0.7, and 0.6.x before 0.6.2 allows remote attackers to cause a denial of service (block-processing outage and incorrect block count) via unknown behavior on a Bitcoin network.CVSS5.0MediumEPSS3.08%PrioritiseCVE-2012-1910bitcoin · bitcoin_core +1 morebitcoin bitcoin_coreBitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW multithread-safe exception handling, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted Bitcoin protocol messages.CVSS7.5HighEPSS4.51%RoutineCVE-2012-1909bitcoin · bitcoin_corebitcoin bitcoin_coreThe Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which allows remote attackers to cause a denial of service (unspendable transaction) by leveraging the ability to create a duplicate coinbase transaction.CVSS5.0MediumEPSS2.93%RoutineCVE-2011-4447bitcoin · bitcoin_core +1 morebitcoin bitcoin_coreThe "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from Bitcoin wallet files by bypassing the BSDDB interface and reading entries that are marked for deletion.CVSS4.3MediumEPSS1.62%RoutineCVE-2010-5141bitcoin · bitcoin_core +1 morebitcoin bitcoin_corewxBitcoin and bitcoind before 0.3.5 do not properly handle script opcodes in Bitcoin transactions, which allows remote attackers to spend bitcoins owned by other users via unspecified vectors.CVSS7.5HighEPSS2.67%RoutineCVE-2010-5140bitcoin · bitcoin_core +1 morebitcoin bitcoin_corewxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, which allows remote attackers to cause a denial of service (invalid-transaction flood) by sending low-valued transactions without transaction fees.CVSS5.0MediumEPSS2.33%PrioritiseCVE-2010-5139bitcoin · bitcoin_core +1 morebitcoin bitcoin_coreInteger overflow in wxBitcoin and bitcoind before 0.3.11 allows remote attackers to bypass intended economic restrictions and create many bitcoins via a crafted Bitcoin transaction.CVSS7.5HighEPSS2.67%RoutineCVE-2010-5138bitcoin · bitcoin_core +1 morebitcoin bitcoin_corewxBitcoin and bitcoind 0.3.x allow remote attackers to cause a denial of service (electricity consumption) via a Bitcoin transaction containing multiple OP_CHECKSIG script opcodes.CVSS5.0MediumEPSS1.97%RoutineCVE-2010-5137bitcoin · bitcoin_core +1 morebitcoin bitcoin_corewxBitcoin and bitcoind before 0.3.5 allow remote attackers to cause a denial of service (daemon crash) via a Bitcoin transaction containing an OP_LSHIFT script opcode.CVSS5.0MediumEPSS2.44%