7.5

CVE-2018-17145

Exploit
Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bcoin ≫ Bcoin Version < 1.0.2
Bitcoin ≫ Bitcoin Core Version >= 0.16.0 < 0.16.2
Bitcoinknots ≫ Bitcoin Knots Version >= 0.16.0 < 0.16.2
Btcd Project ≫ Btcd Version0.3.0 Updatealpha
Btcd Project ≫ Btcd Version0.3.1 Updatealpha
Btcd Project ≫ Btcd Version0.3.2 Updatealpha
Btcd Project ≫ Btcd Version0.3.3 Updatealpha
Btcd Project ≫ Btcd Version0.4.0 Updatealpha
Btcd Project ≫ Btcd Version0.5.0 Updatealpha
Btcd Project ≫ Btcd Version0.6.0 Updatealpha
Btcd Project ≫ Btcd Version0.7.0 Updatealpha
Btcd Project ≫ Btcd Version0.8.0 Updatebeta
Btcd Project ≫ Btcd Version0.9.0 Updatebeta
Btcd Project ≫ Btcd Version0.10.0 Updatebeta
Btcd Project ≫ Btcd Version0.11.0 Updatebeta
Btcd Project ≫ Btcd Version0.11.1 Updatebeta
Btcd Project ≫ Btcd Version0.12.0 Updatebeta
Btcd Project ≫ Btcd Version0.13.0 Updatebeta
Btcd Project ≫ Btcd Version0.13.0 Updatebeta2
Btcd Project ≫ Btcd Version0.20.0 Updatebeta
Btcd Project ≫ Btcd Version0.20.1 Updatebeta
Decred ≫ Dcrd Version < 1.5.2
Litecoin ≫ Litecoin Version >= 0.16.0 < 0.16.2
Namecoin ≫ Namecoin Core Version >= 0.16.0 < 0.16.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.96% 0.761
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

https://invdos.net
Third Party Advisory
https://invdos.net/paper/CVE-2018-17145.pdf
Third Party Advisory
Exploit
Technical Description