CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-15947 – Gentoo Linux Security Advisory 202009-18
https://notcve.org/view.php?id=CVE-2019-15947
05 Sep 2019 — In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command. En Bitcoin Core versión 0.18.0, bitcoin-qt almacena los datos de wallet.dat sin cifrar en la memoria. Ante un bloqueo, puede volcar un archivo core. • https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2019-15947 • CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-20587
https://notcve.org/view.php?id=CVE-2018-20587
11 Feb 2019 — Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port. Bitcoin Core, desde la versión 0.12.0 hasta la 0.17.1 y Bitcoin Knots, desde la versión 0.12.0 hasta la 0.17.x antes de la 0.17.1.knots20181229 tienen un control de acceso incorrecto. Los usuarios locales pueden explotar esta vulnerabilida... • https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20587 •
CVSS: 7.5EPSS: 16%CPEs: 4EXPL: 2CVE-2018-17144
https://notcve.org/view.php?id=CVE-2018-17144
19 Sep 2018 — Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash. Bitcoin Core en versiones 0.14.x anteriores a la 0.14.3, 0.15.x anteriores a la 0.15.2 y 0.16.x anteriores a la 0.16.3 y Bitcoin Knots desde las versiones 0.14.x hasta las 0.16.x anteriores a la 0.16.3 permiten una denegación rem... • https://github.com/iioch/ban-exploitable-bitcoin-nodes •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2016-10724
https://notcve.org/view.php?id=CVE-2016-10724
05 Jul 2018 — Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins. Bitcoin Core en versiones anteriores a la v0.13.0 permite una denegación de servicio (DoS) desencadenada por el siste... • https://bitcoin.org/en/posts/alert-key-and-vulnerabilities-disclosure • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2016-10725
https://notcve.org/view.php?id=CVE-2016-10725
05 Jul 2018 — In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts) because operations occur in the wrong order. This behavior occurs in the remote network alert system (deprecated since Q1 2016). This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins. En Bitcoin Core en versiones anteriores a la v0.13.0, una alerta no final puede bloquear la "alerta final" especial (que se supone... • https://bitcoin.org/en/posts/alert-key-and-vulnerabilities-disclosure • CWE-310: Cryptographic Issues •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2013-5700
https://notcve.org/view.php?id=CVE-2013-5700
10 Sep 2013 — The Bloom Filter implementation in bitcoind and Bitcoin-Qt 0.8.x before 0.8.4rc1 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a crafted sequence of messages. La implementación del Filtro Bloom en bitcoind y Bitcoin-Qt 0.8.x anteriores a 0.8.4rc1 permite a atacantes remotos causar una denegación de servicio (error de división entre 0 y caída del demonio) a través de una secuencia de mensajes manipulada. • https://bitcointalk.org/index.php?topic=287351 • CWE-189: Numeric Errors •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2013-4165
https://notcve.org/view.php?id=CVE-2013-4165
01 Aug 2013 — The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack. La función HTTPAuthorized en bitcoinrpc.cpp en bitcoind 0.8.1, ofrece información acerca del fallo de autenticación incluso detectando el primer byte incorrecto de la contraseña, lo que facilita a atacantes remotos el determinar las contraseña... • http://openwall.com/lists/oss-security/2013/07/25/5 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 2%CPEs: 2EXPL: 0CVE-2013-3219
https://notcve.org/view.php?id=CVE-2013-3219
01 Aug 2013 — bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which allows remote attackers to bypass intended access restrictions and conduct double-spending attacks via a large block that triggers incorrect Berkeley DB locking in older product versions. bitcoind y Bitcoin-Qt 0.8.x anterior a 0.8.1, no refuerza un regla de bloqueo determinada, lo que permite a atacantes remotos evitar las restricciones de acceso y llevar a cabo ataques de "double-spending" a través de un gran blo... • https://en.bitcoin.it/wiki/BIP_0050 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 5%CPEs: 63EXPL: 0CVE-2013-3220
https://notcve.org/view.php?id=CVE-2013-3220
01 Aug 2013 — bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider whether a block's size could require an excessive number of database locks, which allows remote attackers to cause a denial of service (split) and enable certain double-spending capabilities via a large block that triggers incorrect Berkeley DB locking. bitcoind y Bitcoin-Qt anterior a 0.4.9rc2, 0.5.x anterior a 0.5.8rc2, 0.6.x anterior a 0.6.5rc2, y 0.7.x... • https://en.bitcoin.it/wiki/BIP_0050 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2013-4627
https://notcve.org/view.php?id=CVE-2013-4627
01 Aug 2013 — Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x allows remote attackers to cause a denial of service (memory consumption) via a large amount of tx message data. Vulnerabilidad sin especificar en bitcoind y Bitcoin-Qt 0.8.x, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) mediante una gran cantidad de mensajes con datos tx. • https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures •