CVE-2018-17145General(bcoin / bcoin)
LOWCVSS 7.5 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Patch bcoin bcoin systems immediately
Recommended action window: Monitor and triage in normal cycle
NVD description
Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.
1.5/ 10 priority
Sources & remediation
Exploit / PoC references
Vendor / third-party advisories
- https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-17145
- https://github.com/bitcoin/bitcoin/blob/v0.16.2/doc/release-notes.md
- https://invdos.net
- https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-17145
- https://github.com/bitcoin/bitcoin/blob/v0.16.2/doc/release-notes.md
Weakness type (CWE)
CWE-400
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- bcoin
- bitcoin_core
- bitcoin_knots
- btcd
Threat summary
- Patch or workaround signal is available
- 1 mentions across 1 observed day
What's happening
- Patch or workaround mentioned in 1 signal
- Technical details provided in 1 signal
- General: 1 classified signal
- 1 total mentions across 1 day
Affected systems
Products
bcoinbitcoin_corebitcoin_knotsbtcddcrdlitecoinnamecoin_core
17 versions affected across 7 products
Deep dive
Activity timeline1 mentions / 1d
Signal classification1 categories
General1100.0%
CPE platform detail24 entries
24 of 24 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bcoin | bcoin | - | - | - |
| App | bitcoin | bitcoin_core | - | - | - |
| App | bitcoinknots | bitcoin_knots | - | - | - |
| App | btcd_project | btcd | 0.10.0 | - | - |
| App | btcd_project | btcd | 0.11.0 | - | - |
| App | btcd_project | btcd | 0.11.1 | - | - |
| App | btcd_project | btcd | 0.12.0 | - | - |
| App | btcd_project | btcd | 0.13.0 | - | - |
| App | btcd_project | btcd | 0.13.0 | - | - |
| App | btcd_project | btcd | 0.20.0 | - | - |
| App | btcd_project | btcd | 0.20.1 | - | - |
| App | btcd_project | btcd | 0.3.0 | - | - |
| App | btcd_project | btcd | 0.3.1 | - | - |
| App | btcd_project | btcd | 0.3.2 | - | - |
| App | btcd_project | btcd | 0.3.3 | - | - |
| App | btcd_project | btcd | 0.4.0 | - | - |
| App | btcd_project | btcd | 0.5.0 | - | - |
| App | btcd_project | btcd | 0.6.0 | - | - |
| App | btcd_project | btcd | 0.7.0 | - | - |
| App | btcd_project | btcd | 0.8.0 | - | - |
| App | btcd_project | btcd | 0.9.0 | - | - |
| App | decred | dcrd | - | - | - |
| App | litecoin | litecoin | - | - | - |
| App | namecoin | namecoin_core | - | - | - |