Skip to content

CVE-2013-2272 The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc...

MediumCVSS 5.0 EPSS 1.9%
Published
Updated
Exploit status
No public exploit known

Description

The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet addresses and IP addresses via a series of large Bitcoin transactions with insufficient fees.

Affected products

ProductAffected versionsFixed in
bitcoin-qt <= 0.4.8 No fix listed
bitcoin-qt = 0.4-rc4 No fix listed
bitcoin-qt = 0.5.0-rc1 No fix listed
bitcoin-qt = 0.5.0.4 No fix listed
bitcoin-qt = 0.5.1-rc1 No fix listed
bitcoin-qt = 0.5.3.0 No fix listed
bitcoin-qt = 0.5.7 No fix listed
bitcoin-qt = 0.6.0.10-rc4 No fix listed
bitcoin-qt = 0.6.3 No fix listed
bitcoin-qt = 0.7.0-rc1 No fix listed
bitcoin-qt = 0.7.1 No fix listed
bitcoin-qt = 0.7.2 No fix listed
bitcoin core All versions No fix listed
bitcoin core = 0.3.4 No fix listed
bitcoin core = 0.3.5 No fix listed
bitcoin core = 0.3.8 No fix listed
bitcoin core = 0.3.10 No fix listed
bitcoin core = 0.3.11 No fix listed
bitcoin core = 0.3.12 No fix listed
bitcoin core = 0.4.0 No fix listed
bitcoin core = 0.4.1 No fix listed
bitcoin core = 0.4.1-rc6 No fix listed
bitcoin core = 0.4.2 No fix listed
bitcoin core = 0.4.3 No fix listed
bitcoin core = 0.4.4 No fix listed
Show 29 more
ProductAffected versionsFixed in
bitcoin core = 0.4.4-rc2 No fix listed
bitcoin core = 0.4.5 No fix listed
bitcoin core = 0.4.6 No fix listed
bitcoin core = 0.4.7-rc2 No fix listed
bitcoin core = 0.5.0-rc No fix listed
bitcoin core = 0.5.3 No fix listed
bitcoin core = 0.5.3.1 No fix listed
bitcoin core = 0.5.4 No fix listed
bitcoin core = 0.5.5 No fix listed
bitcoin core = 0.5.6-rc2 No fix listed
bitcoin core = 0.6.0.1 No fix listed
bitcoin core = 0.6.0.2 No fix listed
bitcoin core = 0.6.0.3 No fix listed
bitcoin core = 0.6.0.4 No fix listed
bitcoin core = 0.6.0.5 No fix listed
bitcoin core = 0.6.0.6 No fix listed
bitcoin core = 0.6.0.7 No fix listed
bitcoin core = 0.6.0.8 No fix listed
bitcoin core = 0.6.1 No fix listed
bitcoin core = 0.6.2 No fix listed
bitcoind <= 0.4.4 No fix listed
bitcoind = 0.5.7 No fix listed
bitcoind = 0.6.0.0 No fix listed
bitcoind = 0.6.0.10-rc4 No fix listed
bitcoind = 0.6.3 No fix listed
bitcoind = 0.6.4-rc4 No fix listed
bitcoind = 0.7.0-rc1 No fix listed
bitcoind = 0.7.1 No fix listed
bitcoind = 0.7.2 No fix listed

References