CVE-2016-10724: High severity bitcoin vulnerability
Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10724?
CVE-2016-10724 has a severity rating that allows for denial of service, specifically memory exhaustion.
How do I fix CVE-2016-10724?
To mitigate CVE-2016-10724, update Bitcoin Core to version 0.13.0 or later.
What software is affected by CVE-2016-10724?
CVE-2016-10724 affects Bitcoin Core versions prior to 0.13.0, including bitcoin-qt and bitcoind.
Who is impacted by CVE-2016-10724?
Users of Bitcoin Core prior to version 0.13.0 are impacted by CVE-2016-10724.
What type of attack does CVE-2016-10724 enable?
CVE-2016-10724 enables denial of service attacks through remote network alerts.