PT-2024-25720 · Unknown+1 · Bitcoin Knots+2

Published 2024-04-30 · Updated 2026-03-24 · CVE-2024-34149

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions through 27.0 Bitcoin Knots versions prior to 25.1.knots20231115

Description The tapscript implementation does not include a policy size limit check. This is a separate issue from CVE-2023-50428. Some parties have expressed opposition to the implementation of this limit check, citing disagreements with the technical mechanism or differing objectives.

Recommendations Update to a version after 27.0 for Bitcoin Core. Update to version 25.1.knots20231115 or later for Bitcoin Knots.

Fix

Related Identifiers

ALT-PU-2024-15200

CVE-2024-34149

Affected Products

Alt Linux

Bitcoin Core

Bitcoin Knots

References · 61

• https://nvd.nist.gov/vuln/detail/CVE-2024-34149 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34149 · Vendor Advisory
• https://github.com/bitcoin/bitcoin/pull/29769 · Note
• https://twitter.com/axexang/status/2031358018357547036 · Twitter Post
• https://twitter.com/aShitcoinTycoon/status/1975250696422232557 · Twitter Post
• https://twitter.com/grok/status/1980748235678667241 · Twitter Post
• https://twitter.com/axexang/status/2027827463452017090 · Twitter Post
• https://twitter.com/gm7t2/status/1977809729159418088 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1785471729831182687 · Twitter Post
• https://twitter.com/axexang/status/2027191686812594618 · Twitter Post
• https://twitter.com/LukeDashjr/status/1863329552556331326 · Twitter Post
• https://twitter.com/fyijim/status/1932462052955873713 · Twitter Post
• https://twitter.com/Pledditor/status/1851824530945200480 · Twitter Post
• https://twitter.com/axexang/status/1977039254145343872 · Twitter Post
• https://twitter.com/axexang/status/2025553759841947753 · Twitter Post