Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
wxBitcoin and bitcoind before 0.3.5 allow remote attackers to cause a denial of service (daemon crash) via a Bitcoin transaction containing an OP_LSHIFT script opcode.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
@OtherBarryBTC @Darrigel @dathon_ohm It's obvious, right? From OP_CAT to OP_RSHIFT. And you can take a look at the code with a note there: return set_error(serror, SCRIPT_ERR_DISABLED_OPCODE); // Disabled opcodes (CVE-2010-5137).
Post summary
The tweet merely references CVE‑2010‑5137 with a code comment about disabled opcodes, without any additional details on exploitation, PoC, or mitigations.
@CoinImpulse Solche schwurbelnden Armleuchter gab's 2010 auch schon. Witzigerweise habe ich damals echte Sicherheitslücken in bitcoind gefunden... CVE-2010-5137 und CVE-2010-5141.
Post summary
The tweet references two 2010 CVEs found in bitcoind but offers no further technical detail, proof of concept, or exploitation context.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bitcoin | bitcoin_core | - | - | - |
| App | bitcoin | wxbitcoin | - | - | - |