CVE-2013-2292: High severity bitcoin core vulnerability
bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption) by mining a block to create a nonstandard Bitcoin transaction containing multiple OPCHECKSIG script opcodes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2292?
CVE-2013-2292 is classified as a denial of service vulnerability affecting multiple versions of bitcoind and Bitcoin-Qt.
How do I fix CVE-2013-2292?
To mitigate CVE-2013-2292, upgrade to Bitcoin Core versions later than 0.8.0 where this vulnerability has been addressed.
What versions are affected by CVE-2013-2292?
CVE-2013-2292 affects Bitcoin Core 0.8.0 and earlier, including various 0.4.x, 0.5.x, 0.6.x, and 0.7.x versions.
What does CVE-2013-2292 exploit in Bitcoin software?
CVE-2013-2292 allows attackers to create nonstandard Bitcoin transactions with excessive OP_CHECKSIG opcodes, leading to unnecessary electricity consumption.
Is there a workaround for CVE-2013-2292?
While the best practice is to update the software, users can temporarily minimize exposure by restricting access to their node or adjusting transaction verification settings.