CVE-2018-17145: Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka…

Description

Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)4.8% · higher than 92% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

BC

Bcoin · Bcoin

before 1.0.2 · source: NVD

BC

Bitcoin Core · Bitcoin

0.16.0 before 0.16.2 · source: NVD

BK

Bitcoin Knots · Bitcoinknots

0.16.0 before 0.16.2 · source: NVD

BT

Btcd · Btcd Project

0.3.0; 0.3.1; 0.3.2; 0.3.3; 0.4.0; 0.5.0; +12 more · source: NVD

DC

Dcrd · Decred

before 1.5.2 · source: NVD

LI

Litecoin · Litecoin

0.16.0 before 0.16.2 · source: NVD

NC

Namecoin Core · Namecoin

0.16.0 before 0.16.2 · source: NVD