CVE-2018-17145
Summary
| CVE | CVE-2018-17145 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-09-10 17:15:00 UTC |
| Updated | 2020-09-15 14:33:00 UTC |
| Description | Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15. |
Risk And Classification
Problem Types: CWE-400
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Bcoin | Bcoin | All | All | All | All |
| Application | Bcoin | Bcoin | All | All | All | All |
| Application | Bitcoin | Bitcoin Core | All | All | All | All |
| Application | Bitcoin | Bitcoin Core | All | All | All | All |
| Application | Bitcoinknots | Bitcoin Knots | All | All | All | All |
| Application | Bitcoinknots | Bitcoin Knots | All | All | All | All |
| Application | Btcd Project | Btcd | 0.10.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.11.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.11.1 | beta | All | All |
| Application | Btcd Project | Btcd | 0.12.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.13.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.13.0 | beta2 | All | All |
| Application | Btcd Project | Btcd | 0.20.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.20.1 | beta | All | All |
| Application | Btcd Project | Btcd | 0.3.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.3.1 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.3.2 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.3.3 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.4.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.5.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.6.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.7.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.8.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.9.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.10.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.11.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.11.1 | beta | All | All |
| Application | Btcd Project | Btcd | 0.12.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.13.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.13.0 | beta2 | All | All |
| Application | Btcd Project | Btcd | 0.20.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.20.1 | beta | All | All |
| Application | Btcd Project | Btcd | 0.3.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.3.1 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.3.2 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.3.3 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.4.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.5.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.6.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.7.0 | alpha | All | All |
| Application | Btcd Project | Btcd | 0.8.0 | beta | All | All |
| Application | Btcd Project | Btcd | 0.9.0 | beta | All | All |
| Application | Decred | Dcrd | All | All | All | All |
| Application | Decred | Dcrd | All | All | All | All |
| Application | Litecoin | Litecoin | All | All | All | All |
| Application | Litecoin | Litecoin | All | All | All | All |
| Application | Namecoin | Namecoin Core | All | All | All | All |
| Application | Namecoin | Namecoin Core | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| invdos.net/paper/CVE-2018-17145.pdf | CONFIRM | invdos.net | Exploit, Technical Description, Third Party Advisory |
| Common Vulnerabilities and Exposures - Bitcoin Wiki | MISC | en.bitcoin.it | Vendor Advisory |
| INVDoS - Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145) | CONFIRM | invdos.net | Third Party Advisory |
| bitcoin/release-notes.md at v0.16.2 · bitcoin/bitcoin · GitHub | MISC | github.com | Release Notes, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 980546 Nodejs (npm) Security Update for bcoin (GHSA-hx3r-jv9q-85jw)