Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4M3ItanY5cS04NWp3

Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)

There was an easily exploitable uncontrolled memory resource consumption denial-of-service vulnerability that existed in the peer-to-peer network code of three implementations of Bitcoin and several alternative chains.

For more details please see:
https://invdos.net/

For the paper:
https://invdos.net/paper/CVE-2018-17145.pdf

Permalink: https://github.com/advisories/GHSA-hx3r-jv9q-85jw
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4M3ItanY5cS04NWp3
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: about 4 years ago
Updated: almost 2 years ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Identifiers: GHSA-hx3r-jv9q-85jw, CVE-2018-17145
References:

• https://github.com/bcoin-org/bcoin/security/advisories/GHSA-hx3r-jv9q-85jw
• https://nvd.nist.gov/vuln/detail/CVE-2018-17145
• https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-17145
• https://github.com/bitcoin/bitcoin/blob/v0.16.2/doc/release-notes.md
• https://invdos.net
• https://invdos.net/paper/CVE-2018-17145.pdf
• https://github.com/advisories/GHSA-hx3r-jv9q-85jw

Repository: https://github.com/bcoin-org/bcoin
Blast Radius: 19.3

Affected Packages