cbcvebase.
CVE-2013-2293
published 2013-03-12

CVE-2013-2293: The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for…

PriorityP421medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.54%
83.0th percentile
The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O consumption) via a Bitcoin transaction with many inputs corresponding to many different parts of the stored block chain.

Affected

50 ranges· showing 25
VendorProductVersion rangeFixed in
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin_core<= 0.7.2—
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.