CVE-2012-1909
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which allows remote attackers to cause a denial of service (unspendable transaction) by leveraging the ability to create a duplicate coinbase transaction.
El protocolo Bitcoin, como se usa en bitcoind anterior a v0.4.4, wxBitcoin, Bitcoin Qt, y otros programas, no maneja adecuadamente las transacciones múltiples con el mismo identificador, lo que permite a atacantes remotos provocar una denegación de servicio (transacción unspendable) mediante el aprovechamiento de la capacidad de crear una transacción coinbase duplicado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-03-26 CVE Reserved
- 2012-08-06 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- 2024-09-17 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-16: Configuration
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://r6.ca/blog/20120206T005236Z.html | X_refsource_misc | |
| http://sourceforge.net/mailarchive/forum.php?thread_name=CAPg%2BsBhmGHnMResVxPDZdfpmWTb9uqD0RrQD7oSXBQq7oHpm8g%40mail.gmail.com&forum_name=bitcoin-development | Mailing List | |
| https://bitcointalk.org/index.php?topic=67738.0 | X_refsource_confirm | |
| https://bugs.gentoo.org/show_bug.cgi?id=407793 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://github.com/sipa/bitcoin/commit/a206b0ea12eb4606b93323268fc81a4f1f952531 | 2024-09-17 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://en.bitcoin.it/wiki/BIP_0030 | 2020-03-18 | |
| https://en.bitcoin.it/wiki/CVEs | 2020-03-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | * | - |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | <= 0.4.4 Search vendor "Bitcoin" for product "Bitcoin Core" and version " <= 0.4.4" | rc2 |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | 0.3.4 Search vendor "Bitcoin" for product "Bitcoin Core" and version "0.3.4" | - |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | 0.3.5 Search vendor "Bitcoin" for product "Bitcoin Core" and version "0.3.5" | - |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | 0.3.8 Search vendor "Bitcoin" for product "Bitcoin Core" and version "0.3.8" | - |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | 0.3.10 Search vendor "Bitcoin" for product "Bitcoin Core" and version "0.3.10" | - |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | 0.3.11 Search vendor "Bitcoin" for product "Bitcoin Core" and version "0.3.11" | - |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | 0.3.12 Search vendor "Bitcoin" for product "Bitcoin Core" and version "0.3.12" | - |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | 0.4.0 Search vendor "Bitcoin" for product "Bitcoin Core" and version "0.4.0" | - |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | 0.4.1 Search vendor "Bitcoin" for product "Bitcoin Core" and version "0.4.1" | - |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Bitcoin Core Search vendor "Bitcoin" for product "Bitcoin Core" | 0.4.1 Search vendor "Bitcoin" for product "Bitcoin Core" and version "0.4.1" | rc6 |
Affected
| ||||||
| Bitcoin Search vendor "Bitcoin" | Wxbitcoin Search vendor "Bitcoin" for product "Wxbitcoin" | * | - |
Affected
| ||||||