Unscored severity · published Mar 12, 2013
CVE-2013-2273
bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote…
–
CVSS
1.9%
EPSS
No
On KEV
Description
bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote attackers to obtain potentially sensitive information about returned change by leveraging certain predictability in the outputs of a Bitcoin transaction.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BC
Bitcoin Core · Bitcoin
0.3.4; 0.3.5; 0.3.8; 0.3.10; 0.3.11; 0.3.12; +26 more · source: NVD
BI
Bitcoin-qt · Bitcoin
through 0.4.8; 0.4; 0.5.0; 0.5.0.4; 0.5.1; 0.5.3.0; +6 more · source: NVD
BI
Bitcoind · Bitcoin
through 0.4.4; 0.5.7; 0.6.0.0; 0.6.0.10; 0.6.3; 0.6.4; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2273
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2273
en.bitcoin.it
https://en.bitcoin.it/wiki/CVEs
More from Bitcoin Core
9.8
CVE-2015-20111
miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a…
7.5
CVE-2025-46597
Bitcoin Core 0.13.0 through 29.x has an integer overflow
7.5
CVE-2025-54605
Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2)
7.5
CVE-2025-54604
Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2)
7.5
CVE-2024-52912
Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connecting peers) and an abs64 logic bug