Bitcoin Core vulnerability allows remote attackers to cause denial of service
CVE-2024-52920

7.5HIGH

Key Information:

Vendor

Bitcoin Core

Status
Bitcoin Core
Vendor
CVE Published:
18 November 2024

What is CVE-2024-52920?

A flaw in Bitcoin Core versions prior to 0.20.0 allows remote attackers to exploit a malformed GETDATA message. This vulnerability can lead to an infinite loop, effectively resulting in denial of service for affected systems. Users are urged to update to the latest version to mitigate risks and ensure stability.

References

https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exp...
https://bitcoincore.org/en/2024/07/03/disclose-getdata-cpu/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.