CVE-2016-10725: High severity bitcoin vulnerability
In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts) because operations occur in the wrong order. This behavior occurs in the remote network alert system (deprecated since Q1 2016). This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2016-10725?
CVE-2016-10725 is a vulnerability in Bitcoin Core before version 0.13.0 that allows a non-final alert to block the special final alert, overriding all other alerts.
What is the severity of CVE-2016-10725?
The severity of CVE-2016-10725 is high, with a CVSS score of 7.5.
How does CVE-2016-10725 affect Bitcoin Core?
CVE-2016-10725 affects Bitcoin Core versions before 0.13.0, specifically the remote network alert system (deprecated since Q1 2016) and other uses of the alert system.
How can I fix CVE-2016-10725?
To fix CVE-2016-10725, update Bitcoin Core to version 0.13.0 or later.
Where can I find more information about CVE-2016-10725?
You can find more information about CVE-2016-10725 on the Bitcoin.org website, the Bitcoin Wiki, and the GitHub repository.