CVE-2018-17145
Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2020-09-10
- Last modified
- 2024-08-05
- Weaknesses
- CWE-400
Affected products
- Bcoin (Bcoin)
- Bitcoin Core (Bitcoin)
- Bitcoin Knots (Bitcoinknots)
- Btcd (Btcd Project)
- Dcrd (Decred)
- Litecoin (Litecoin)
- Namecoin Core (Namecoin)
References
- https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-17145
- https://github.com/bitcoin/bitcoin/blob/v0.16.2/doc/release-notes.md
- https://invdos.net
- https://invdos.net/paper/CVE-2018-17145.pdf
