CVE-2018-17145
10.09.2020, 17:15
Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.Enginsight
| Vendor | Product | Version |
|---|---|---|
| bcoin | bcoin | 𝑥 < 1.0.2 |
| bitcoin | bitcoin_core | 0.16.0 ≤ 𝑥 < 0.16.2 |
| bitcoinknots | bitcoin_knots | 0.16.0 ≤ 𝑥 < 0.16.2 |
| btcd_project | btcd | 0.3.0:alpha |
| btcd_project | btcd | 0.3.1:alpha |
| btcd_project | btcd | 0.3.2:alpha |
| btcd_project | btcd | 0.3.3:alpha |
| btcd_project | btcd | 0.4.0:alpha |
| btcd_project | btcd | 0.5.0:alpha |
| btcd_project | btcd | 0.6.0:alpha |
| btcd_project | btcd | 0.7.0:alpha |
| btcd_project | btcd | 0.8.0:beta |
| btcd_project | btcd | 0.9.0:beta |
| btcd_project | btcd | 0.10.0:beta |
| btcd_project | btcd | 0.11.0:beta |
| btcd_project | btcd | 0.11.1:beta |
| btcd_project | btcd | 0.12.0:beta |
| btcd_project | btcd | 0.13.0:beta |
| btcd_project | btcd | 0.13.0:beta2 |
| btcd_project | btcd | 0.20.0:beta |
| btcd_project | btcd | 0.20.1:beta |
| decred | dcrd | 𝑥 < 1.5.2 |
| litecoin | litecoin | 0.16.0 ≤ 𝑥 < 0.16.2 |
| namecoin | namecoin_core | 0.16.0 ≤ 𝑥 < 0.16.2 |
𝑥
= Vulnerable software versions
References