Page 2 of 10 results (0.003 seconds)

CVSS: 5.0EPSS: 0%CPEs: 53EXPL: 0

CVE-2013-2293

https://notcve.org/view.php?id=CVE-2013-2293

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O consumption) via a Bitcoin transaction with many inputs corresponding to many different parts of the stored block chain. El método CTransaction::FetchInputs en bitcoind y Bitcoin-Qt anterior a v0.8.0rc1 copia transacciones del disco a la memoria sin comprobar de forma incremental "spent prevouts", lo que permite a atacantes remotos provocar una denegación de servicio (consumo de disco I/O) a través de una transacción de Bitcoin con muchas entradas correspondientes a diferentes partes de la cadena de bloque almacenado (block chain). • https://bitcointalk.org/?topic=144122 https://en.bitcoin.it/wiki/CVE-2013-2293 https://en.bitcoin.it/wiki/CVEs • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 43EXPL: 0

CVE-2012-4684

https://notcve.org/view.php?id=CVE-2012-4684

The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service (resource consumption) via a valid modified signature for a circulating alert. La funcionalidad Alert en bitcoind y Bitcoin-Qt anterior a v0.7.0 soporta diferentes representaciones de caractéres de la misma firma de datos, pero depende del hash de esta firma, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de recursos) a través de una firma válida modificada para una alerta circulante. • https://bitcointalk.org/index.php?topic=148109.0 https://bitcointalk.org/index.php?topic=8392.0 https://en.bitcoin.it/wiki/CVE-2012-4684 https://en.bitcoin.it/wiki/CVEs • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 55EXPL: 0

CVE-2013-2292

https://notcve.org/view.php?id=CVE-2013-2292

bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption) by mining a block to create a nonstandard Bitcoin transaction containing multiple OP_CHECKSIG script opcodes. Bitcoind y Bitcoin-Qt v0.8.0 y anteriores permiten a atacantes remotos provocar una denegación de servicio por minar un bloque para crear una transacción Bitcoin no estándar opcodes OP_CHECKSIG. • https://bitcointalk.org/?topic=140078 https://en.bitcoin.it/wiki/CVEs • CWE-399: Resource Management Errors •

CVSS: 5.0EPSS: 0%CPEs: 54EXPL: 0

CVE-2013-2272

https://notcve.org/view.php?id=CVE-2013-2272

The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet addresses and IP addresses via a series of large Bitcoin transactions with insufficient fees. El mecanismo de protección "penny-flooding" en el método CTxMemPool::accept en bitcoind and Bitcoin-Qt before v0.4.9rc1, v0.5.x anterior a v0.5.8rc1, v0.6.0 anterior a v0.6.0.11rc1, v0.6.1 hasta v0.6.5 anterior a v0.6.5rc1, y v0.7.x anterior a v0.7.3rc1 permite a atacantes remotos determinar asociaciones entre "wallet addresses" y direcciones IP mediante una serie de transacciones Bitcoin con insuficientes tasas. • https://bitcointalk.org/?topic=135856 https://en.bitcoin.it/wiki/CVEs • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.5EPSS: 3%CPEs: 11EXPL: 1

CVE-2012-1910

https://notcve.org/view.php?id=CVE-2012-1910

Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW multithread-safe exception handling, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted Bitcoin protocol messages. Bitcoin-Qt 0.5.0.x anterior a 0.5.0.5; 0.5.1.x, 0.5.2.x, y 0.5.3.x anterior a 0.5.3.1; y 0.6.x anterior a 0.6.0rc4 sobre Windows no utiliza ningún manejador de excepciones MinGW multithread-safe, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente la ejecución arbitrario de código a través de mensajes del protocolo de Bitcoin. • http://gavintech.blogspot.com/2012/03/full-disclosure-bitcoin-qt-on-windows.html https://bitcointalk.org/index.php?topic=69120.0 https://en.bitcoin.it/wiki/CVEs https://github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831 •