CVE-2018-17145
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.
Affected (24)
Show all products
Bcoin: Bcoin · Bitcoin: Bitcoin Core · Bitcoinknots: Bitcoin Knots · Btcd Project: Btcd · Decred: Dcrd · Litecoin: Litecoin · Namecoin: Namecoin Core
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2 | |
| From 0.16.0 to 0.16.2 | |
| From 0.16.0 to 0.16.2 | |
| Version 0.10.0 beta | |
| Before 1.5.2 | |
| From 0.16.0 to 0.16.2 | |
| From 0.16.0 to 0.16.2 |
References (8)
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Release NotesThird Party Advisory
Source: cve@mitre.org
ExploitTechnical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical DescriptionThird Party Advisory
Timeline
No history available yet.