CVE-2021-37491

Published: Feb 7, 2023Modified: Mar 25, 2025

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction() function.

Affected (1)

Products: Dogecoin: Dogecoin

Dogecoin

1 product

Dogecoin

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dogecoin Dogecoin	Up to 1.14.3

References (10)

http://dogecoin.com

Source: cve@mitre.org

Product

https://github.com/VPRLab/BlkVulnReport/blob/main/NDSS23_BlockScope.pdf

Source: cve@mitre.org

ExploitTechnical Description

https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3

Source: cve@mitre.org

Patch

https://github.com/dogecoin/dogecoin/blob/master/src/wallet/wallet.cpp#L2628-L2640

Source: cve@mitre.org

Exploit

https://github.com/dogecoin/dogecoin/issues/2279

Source: cve@mitre.org

Issue TrackingPatch

http://dogecoin.com