cbcvebase.
CVE-2013-3220
published 2013-08-02

CVE-2013-3220: bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider…

PriorityP428medium6.4CVSS 2.0
AVNACLAuNCNIPAP
EPSS
2.38%
81.8th percentile
bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider whether a block's size could require an excessive number of database locks, which allows remote attackers to cause a denial of service (split) and enable certain double-spending capabilities via a large block that triggers incorrect Berkeley DB locking.

Affected

60 ranges· showing 25
VendorProductVersion rangeFixed in
bitcoinbitcoin-qt<= 0.4.9—
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin-qt——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
bitcoinbitcoin_core——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.