bcoin-org/bcoin · Security
Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)
- GHSA ID
- GHSA-hx3r-jv9q-85jw
- CVE ID
- CVE-2018-17145
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
There was an easily exploitable uncontrolled memory resource consumption denial-of-service vulnerability that existed in the peer-to-peer network code of three implementations of Bitcoin and several alternative chains.
For more details please see: https://invdos.net/
For the paper: https://invdos.net/paper/CVE-2018-17145.pdf
CWEs
- CWE-400 · Uncontrolled Resource Consumption
References
- https://github.com/bcoin-org/bcoin/security/advisories/GHSA-hx3r-jv9q-85jw ↗
- https://nvd.nist.gov/vuln/detail/CVE-2018-17145 ↗
- https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-17145 ↗
- https://github.com/bitcoin/bitcoin/blob/v0.16.2/doc/release-notes.md ↗
- https://invdos.net ↗
- https://invdos.net/paper/CVE-2018-17145.pdf ↗
- https://github.com/advisories/GHSA-hx3r-jv9q-85jw ↗