CVE-2017-12842: Input Validation
Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. Completing the attack would cost more than a million dollars, and is relevant mainly only in situations where an autonomous system relies solely on an SPV proof for transactions of a greater dollar amount.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12842?
CVE-2017-12842 has a severity rating that suggests it poses a significant risk under specific conditions, mainly impacting SPV wallet users in Bitcoin transactions.
How do I fix CVE-2017-12842?
The recommended fix for CVE-2017-12842 is to upgrade your Bitcoin Core client to version 0.14.0 or later.
Who is affected by CVE-2017-12842?
CVE-2017-12842 primarily affects users of Bitcoin Core prior to version 0.14, especially those utilizing SPV wallets.
What type of attack does CVE-2017-12842 enable?
CVE-2017-12842 allows an attacker to create a fake SPV proof that can mislead a victim into believing a payment transaction occurred.
What is the estimated cost for exploiting CVE-2017-12842?
Exploiting CVE-2017-12842 theoretically requires an attack cost exceeding one million dollars, making it impractical for most attackers.