CVE-2013-2293 The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers...
MediumCVSS 5.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O consumption) via a Bitcoin transaction with many inputs corresponding to many different parts of the stored block chain.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitcoin-qt | = 0.4-rc4 | No fix listed |
| bitcoin-qt | = 0.4.8-rc4 | No fix listed |
| bitcoin-qt | = 0.5.0-rc1 | No fix listed |
| bitcoin-qt | = 0.5.0.4 | No fix listed |
| bitcoin-qt | = 0.5.1-rc1 | No fix listed |
| bitcoin-qt | = 0.5.3.0 | No fix listed |
| bitcoin-qt | = 0.5.7 | No fix listed |
| bitcoin-qt | = 0.6.0.10-rc4 | No fix listed |
| bitcoin-qt | = 0.6.3 | No fix listed |
| bitcoin-qt | = 0.7.0-rc1 | No fix listed |
| bitcoin-qt | = 0.7.1 | No fix listed |
| bitcoin core | All versions | No fix listed |
| bitcoin core | <= 0.7.2 | No fix listed |
| bitcoin core | = 0.3.4 | No fix listed |
| bitcoin core | = 0.3.5 | No fix listed |
| bitcoin core | = 0.3.8 | No fix listed |
| bitcoin core | = 0.3.10 | No fix listed |
| bitcoin core | = 0.3.11 | No fix listed |
| bitcoin core | = 0.3.12 | No fix listed |
| bitcoin core | = 0.4.0 | No fix listed |
| bitcoin core | = 0.4.1 | No fix listed |
| bitcoin core | = 0.4.1-rc6 | No fix listed |
| bitcoin core | = 0.4.2 | No fix listed |
| bitcoin core | = 0.4.3 | No fix listed |
| bitcoin core | = 0.4.4 | No fix listed |
Show 28 more
| Product | Affected versions | Fixed in |
|---|---|---|
| bitcoin core | = 0.4.4-rc2 | No fix listed |
| bitcoin core | = 0.4.5 | No fix listed |
| bitcoin core | = 0.4.6 | No fix listed |
| bitcoin core | = 0.4.7-rc2 | No fix listed |
| bitcoin core | = 0.5.0-rc | No fix listed |
| bitcoin core | = 0.5.3 | No fix listed |
| bitcoin core | = 0.5.3.1 | No fix listed |
| bitcoin core | = 0.5.4 | No fix listed |
| bitcoin core | = 0.5.5 | No fix listed |
| bitcoin core | = 0.5.6-rc2 | No fix listed |
| bitcoin core | = 0.6.0.1 | No fix listed |
| bitcoin core | = 0.6.0.2 | No fix listed |
| bitcoin core | = 0.6.0.3 | No fix listed |
| bitcoin core | = 0.6.0.4 | No fix listed |
| bitcoin core | = 0.6.0.5 | No fix listed |
| bitcoin core | = 0.6.0.6 | No fix listed |
| bitcoin core | = 0.6.0.7 | No fix listed |
| bitcoin core | = 0.6.0.8 | No fix listed |
| bitcoin core | = 0.6.1 | No fix listed |
| bitcoin core | = 0.6.2 | No fix listed |
| bitcoind | = 0.4.4-rc4 | No fix listed |
| bitcoind | = 0.5.7 | No fix listed |
| bitcoind | = 0.6.0.0 | No fix listed |
| bitcoind | = 0.6.0.10-rc4 | No fix listed |
| bitcoind | = 0.6.3 | No fix listed |
| bitcoind | = 0.6.4-rc4 | No fix listed |
| bitcoind | = 0.7.0-rc1 | No fix listed |
| bitcoind | = 0.7.1 | No fix listed |