CVE-2013-2273: Infoleak
bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote attackers to obtain potentially sensitive information about returned change by leveraging certain predictability in the outputs of a Bitcoin transaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2273?
CVE-2013-2273 has been classified as a medium severity vulnerability.
How do I fix CVE-2013-2273?
To fix CVE-2013-2273, upgrade to a version of Bitcoin-Qt or bitcoind that is 0.4.9rc1 or later.
What types of software are affected by CVE-2013-2273?
CVE-2013-2273 affects Bitcoin-Qt and bitcoind versions prior to 0.4.9rc1.
What kind of information can be exposed due to CVE-2013-2273?
CVE-2013-2273 may allow remote attackers to obtain potentially sensitive information about returned change.
Is there any potential for exploit regarding CVE-2013-2273?
Yes, the vulnerability may be exploited due to predictable outputs impacting the privacy of transactions.