CVE-2017-12842

Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did…

published March 16, 2020

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. Completing the attack would cost more than a million dollars, and is relevant mainly only in situations where an autonomous system relies solely on an SPV proof for transactions of a greater dollar amount.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02218 · 82.4th percentile
Published
2020-03-16T19:42Z
EPSS history
Timeline
  • 16 MAR 19:42Z
    Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did…
    cvelistv5