CVE-2015-6964

MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers. (Attackers cannot realistically steal these fees for themselves.) This occurs because there is no message authentication code (MAC).

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2023-09-25

Last modified

2024-09-24

Weaknesses

CWE-697

Affected products

• Multibit Hd (Multibit)

References

• https://web.archive.org/web/20160506095434/https://multibit.org/blog/2015/07/25/bit-flipping-attack.html