Stack-Based Buffer Overflow in Bitcoin Core Software by Bitcoin
CVE-2017-18350

5.9MEDIUM

Key Information:

Vendor

Bitcoin

Status
Bitcoin Core
Vendor
CVE Published:
12 March 2020

What is CVE-2017-18350?

A critical flaw exists in Bitcoin Core software, namely bitcoind and Bitcoin-Qt versions prior to 0.15.1, involving a stack-based buffer overflow vulnerability. When an attacker controls a SOCKS proxy server, a signed integer error can arise when the server replies with an unexpected target domain name. This can lead to significant security risks, including arbitrary code execution and exposure of sensitive user information.

References

https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exp...
x_refsource_MISC
https://medium.com/%40lukedashjr/cve-2017-18350-disclosur...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.