CVE-2013-2272: Infoleak
The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet addresses and IP addresses via a series of large Bitcoin transactions with insufficient fees.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2272?
CVE-2013-2272 has a medium severity level due to its potential to expose wallet address associations.
How do I fix CVE-2013-2272?
To fix CVE-2013-2272, update your Bitcoin software to versions 0.4.9rc1 or higher.
What software is affected by CVE-2013-2272?
CVE-2013-2272 affects Bitcoin-Qt and bitcoind versions prior to 0.4.9rc1.
Can CVE-2013-2272 be exploited remotely?
Yes, CVE-2013-2272 can be exploited remotely, allowing attackers to determine wallet address associations.
What functionality is compromised by CVE-2013-2272?
CVE-2013-2272 compromises the penny-flooding protection mechanism in Bitcoin's memory pool.