PT-2023-25828 · Unknown+1 · Bitcoin Core+1

Nocyberwarforgames · Published 2023-07-06 · Updated 2024-11-14 · CVE-2023-37192

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Bitcoin Core version 22

Description The issue is related to memory management and protection in Bitcoin Core, allowing attackers to modify the stored sending address within the app's memory. This could potentially enable them to redirect Bitcoin transactions to wallets of their own choosing.

Recommendations For Bitcoin Core version 22, update to a version that includes fixes for memory management and protection issues to prevent potential transaction redirection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

ALT-PU-2024-15200

CVE-2023-37192

Affected Products

Alt Linux

Bitcoin Core

References · 17

• 🔥 https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html · Exploit
• 🔥 https://youtube.com/watch?v=oEl4M1oZim0 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35202 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-33297 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-50428 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37192 · Security Note
• https://errata.altlinux.org/ALT-PU-2024-15200 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34149 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50428 · Security Note
• https://osv.dev/vulnerability/CVE-2023-37192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37192 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33297 · Security Note
• https://packages.altlinux.org/ru/vuln/CVE-2023-37192 · Note
• https://t.me/cvenotify/54511 · Telegram Post
• https://t.me/cvenotify/53828 · Telegram Post