CVE-2012-4684: The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature,…

Unscored severity · published Mar 12, 2013

CVE-2012-4684

The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature,…

–

CVSS

2.9%

EPSS

On KEV

Description

The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service (resource consumption) via a valid modified signature for a circulating alert.

Exploitation

Is it being used?

Exploit prediction (EPSS)2.9% · higher than 87% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Bitcoin Core · Bitcoin

0.3.4; 0.3.5; 0.3.8; 0.3.10; 0.3.11; 0.3.12; +26 more · source: NVD

Bitcoin-qt · Bitcoin

0.6.3 · source: NVD