CVE-2017-18350

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used

published March 12, 2020

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01598 · 75.6th percentile
Published
2020-03-12T20:13Z
EPSS history
Timeline
  • 12 MAR 20:13Z
    bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used
    cvelistv5