PT-2013-1693

CVE-2012-4684

·

Published

2013-03-12

·

Updated

2020-03-18

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions bitcoind and Bitcoin-Qt versions prior to 0.7.0
Description The issue concerns the alert functionality in the affected software, which improperly handles different character representations of the same signature data. It relies on a hash of this signature, allowing remote attackers to cause a denial of service through resource consumption by providing a valid modified signature for a circulating alert.
Recommendations For versions prior to 0.7.0, update to version 0.7.0 or later to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾