PT-2012-4999 · Bitcoin · Bitcoin-Qt+1

Published 2012-08-06 · Updated 2020-03-18 · CVE-2012-3789

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Bitcoin-Qt versions prior to 0.4.7rc3 Bitcoin-Qt versions 0.5.x prior to 0.5.6rc3 Bitcoin-Qt versions 0.6.0.x prior to 0.6.0.9rc1 Bitcoin-Qt versions 0.6.x prior to 0.6.3rc1 bitcoind versions prior to 0.4.7rc3 bitcoind versions 0.5.x prior to 0.5.6rc3 bitcoind versions 0.6.0.x prior to 0.6.0.9rc1 bitcoind versions 0.6.x prior to 0.6.3rc1

Description The issue allows remote attackers to cause a denial of service, resulting in a process hang, via unknown behavior on a Bitcoin network.

Recommendations For Bitcoin-Qt and bitcoind versions prior to 0.4.7rc3, update to version 0.4.7rc3 or later. For Bitcoin-Qt and bitcoind versions 0.5.x prior to 0.5.6rc3, update to version 0.5.6rc3 or later. For Bitcoin-Qt and bitcoind versions 0.6.0.x prior to 0.6.0.9rc1, update to version 0.6.0.9rc1 or later. For Bitcoin-Qt and bitcoind versions 0.6.x prior to 0.6.3rc1, update to version 0.6.3rc1 or later.

Fix

Related Identifiers

CVE-2012-3789

Affected Products

Bitcoin-Qt

Bitcoind

References · 2

• https://en.bitcoin.it/wiki/CVEs · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3789 · Security Note