PT-2023-25828 · Unknown+1 · Bitcoin Core+1

Nocyberwarforgames · Publicado 2023-07-06 · Atualizado 2024-11-14 · CVE-2023-37192

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Bitcoin Core version 22

Description The issue is related to memory management and protection in Bitcoin Core, allowing attackers to modify the stored sending address within the app's memory. This could potentially enable them to redirect Bitcoin transactions to wallets of their own choosing.

Recommendations For Bitcoin Core version 22, update to a version that includes fixes for memory management and protection issues to prevent potential transaction redirection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-311

Identificadores relacionados

ALT-PU-2024-15200

CVE-2023-37192

Produtos afetados

Alt Linux

Bitcoin Core

Referências · 17

• 🔥 https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html · Exploit
• 🔥 https://youtube.com/watch?v=oEl4M1oZim0 · Exploit
• https://packages.altlinux.org/ru/vuln/CVE-2023-37192 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35202 · Nota de Segurança
• https://t.me/cvenotify/54511 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-33297 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-50428 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37192 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2024-15200 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34149 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50428 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-37192 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-37192 · Nota de Segurança
• https://t.me/cvenotify/53828 · Publicação no Telegram
• https://bitcoin.org/en/bitcoin-core · Nota