Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Cameron Garnham

#35210de 53,635
7.5CVSS total
Vulnerabilidades · 1
PT-2017-18795
7.5
2017-05-24
Bitcoin · Bitcoind · CVE-2017-9230
**Name of the Vulnerable Software and Affected Versions** Bitcoin (affected versions not specified) **Description** The Bitcoin Proof-of-Work algorithm has an issue related to 80-byte block headers with varying initial 64-byte chunks followed by the same 16-byte chunk, and multiple candidate root values ending with the same 4 bytes. This involves calculations with sqrt numbers, violating two security assumptions: the choice of input outside of the dedicated nonce area should not change the difficulty to evaluate the Proof-of-Work function, and every Proof-of-Work function execution should be independent. Some individuals consider this methodology a benign mining optimization rather than a vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.