Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from Bitcoin wallet files by bypassing the BSDDB interface and reading entries that are marked for deletion.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 2 products
@JWWeatherman_ @SeedSigner CVE-2010-5139, CVE-2018-17144, CVE-2013-3220, CVE-2012-2459, CVE-2011-4447 and you only said no to part of the issue raised - single point of failure, OP also references merely one potential part of a quorum.
Post summary
The tweet enumerates several CVE identifiers and briefly comments on a single point of failure, but provides no technical details, exploits, patches, or evidence of active use.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bitcoin | bitcoin_core | 0.4.0 | - | - |
| App | bitcoin | bitcoin_core | 0.4.1 | - | - |
| App | bitcoin | bitcoin_core | 0.5.0 | - | - |
| App | bitcoin | wxbitcoin | 0.4.0 | - | - |
| App | bitcoin | wxbitcoin | 0.4.1 | - | - |
| App | bitcoin | wxbitcoin | 0.5.0 | - | - |