rpm package
opensuse/bitcoin&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/bitcoin&distro=openSUSE%20Tumbleweed
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-35202 | — | < 31.0-2.1 | 31.0-2.1 | Oct 10, 2024 | Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message that are not committed to in a block's merkle root. FillBlock can be called twice for one PartiallyDow | ||
| CVE-2023-37192 | — | < 31.0-2.1 | 31.0-2.1 | Jul 6, 2023 | Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing. | ||
| CVE-2020-14198 | — | < 31.0-2.1 | 31.0-2.1 | Sep 10, 2020 | Bitcoin Core 0.20.0 allows remote denial of service. | ||
| CVE-2019-15947 | — | < 31.0-2.1 | 31.0-2.1 | Sep 5, 2019 | In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command. | ||
| CVE-2018-20587 | — | < 31.0-2.1 | 31.0-2.1 | Feb 11, 2019 | Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port. |
- CVE-2024-35202Oct 10, 2024affected < 31.0-2.1fixed 31.0-2.1
Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message that are not committed to in a block's merkle root. FillBlock can be called twice for one PartiallyDow
- CVE-2023-37192Jul 6, 2023affected < 31.0-2.1fixed 31.0-2.1
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
- CVE-2020-14198Sep 10, 2020affected < 31.0-2.1fixed 31.0-2.1
Bitcoin Core 0.20.0 allows remote denial of service.
- CVE-2019-15947Sep 5, 2019affected < 31.0-2.1fixed 31.0-2.1
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command.
- CVE-2018-20587Feb 11, 2019affected < 31.0-2.1fixed 31.0-2.1
Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port.