CVE-2017-18350Patch(bitcoin / bitcoin_core)

LOWCVSS 5.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch bitcoin bitcoin_core systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • bitcoin_core

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
bitcoin_core

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-03: 1Patch / Workaround · 2026-06-03: 1Technical Details · 2026-06-03: 106-03
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • Exitnode_@exitnode_
    Patch

    I genuinely do not get the psyop around Zcash. This guy tries to reference "moneros inflation bug" which hasnt happened in almost a decade. Here's a list of recent $ZEC exploits and bugs: March 1, 2018: BCTV14 zk-SNARK counterfeiting vulnerability (CVE-2019-7167) discovered (infinite counterfeit ZEC possible in Sprout pool). October 28, 2018: Sapling upgrade fixes the 2018 counterfeiting vulnerability. September 13, 2019: Security issue reported . November 8, 2019: CVE-2017-18350 response and "related fixes. " February 6, 2020: Sprout z-address wallet balance display bug. February 6, 2020: Consensus fork vulnerability. July 28, 2020: Sprout verification vulnerability introduced (bypass of proof checks). March 23, 2026: Sprout verification vulnerability disclosed (~25k ZEC counterfeiting risk; March 31, 2026). April 4, 2026: Multiple zcashd/Zebra issues reported (Orchard crashes, consensus gaps, turnstile bypass, integer issues). April 17, 2026: zcashd v6.12.1 and Zebra v4.3.1 fixes for the April bundle (including CVE-2026-34377 and others). May 2, 2026: Zebra v4.4.0 critical fixes (consensus, DoS, sigops undercount). May 29, 2026: Orchard shielded pool double-spending risk discovered. June 2–3, 2026: Emergency soft/hard fork for Orchard fix. This focuses on publicly notable/security-relevant issues; many minor bugs exist in routine updates but lack specific dated disclosures.

    Post summary

    The post compiles a timeline of Zcash CVEs, highlighting the vulnerabilities and the corresponding software fixes released to mitigate them.

    2212761.8K
    2.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appbitcoinbitcoin_core---

Explore more