CVE-2013-2293

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for…

published March 12, 2013

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O consumption) via a Bitcoin transaction with many inputs corresponding to many different parts of the stored block chain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02955 · 87.1th percentile
Published
2013-03-12T10:00Z
EPSS history
Timeline
  • 12 MAR 10:00Z
    The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for…
    cvelistv5