CVE-2017-18350: Buffer Overflow
Published Mar 12, 2020
·Updated
bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.
Affected Software
1 affected component
Bitcoin Bitcoin Core<0.15.1
Event History
Mar 12, 2020
CVE Published
via MITRE·08:13 PM
Data Sourced
via MITRE·08:13 PM
Description
Frequently Asked Questions
1
What is the risk of CVE-2017-18350 vulnerability?
The severity of CVE-2017-18350 is rated as medium with a severity value of 5.9.
2
How can I mitigate CVE-2017-18350 vulnerability?
To mitigate CVE-2017-18350, users should update to bitcoind and Bitcoin-Qt version 0.15.1 or later.
3
What is the root cause of CVE-2017-18350 vulnerability?
CVE-2017-18350 vulnerability is caused by a stack-based buffer overflow due to an integer signedness error in response to an unexpected target domain name from an attacker-controlled SOCKS proxy server.