CVE-2017-12842 Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. Completing the attack...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. Completing the attack would cost more than a million dollars, and is relevant mainly only in situations where an autonomous system relies solely on an SPV proof for transactions of a greater dollar amount.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitcoin core | < 0.14.0 | 0.14.0 |
References
- bitslog.wordpress.com third-party-advisory
- en.bitcoin.it vendor-advisory
- lists.linuxfoundation.org third-party-advisory