CVE-2018-20586: Medium severity bitcoin vulnerability
Published Mar 12, 2020
·Updated
bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.
Affected Software
51 affected components
Bitcoin Bitcoin Core=0.12.0-rc1
Bitcoin Bitcoin Core=0.12.0-rc2
Bitcoin Bitcoin Core=0.12.0-rc3
Bitcoin Bitcoin Core=0.12.0-rc4
Bitcoin Bitcoin Core=0.12.0-rc5
Bitcoin Bitcoin Core=0.12.1
Bitcoin Bitcoin Core=0.12.1-rc1
Bitcoin Bitcoin Core=0.12.1-rc2
Bitcoin Bitcoin Core=0.13
Bitcoin Bitcoin Core=0.13.0
Bitcoin Bitcoin Core=0.13.0-rc1
Bitcoin Bitcoin Core=0.13.0-rc2
Bitcoin Bitcoin Core=0.13.0-rc3
Bitcoin Bitcoin Core=0.13.1
Bitcoin Bitcoin Core=0.13.1-rc1
Bitcoin Bitcoin Core=0.13.1-rc2
Bitcoin Bitcoin Core=0.13.1-rc3
Bitcoin Bitcoin Core=0.13.2
Bitcoin Bitcoin Core=0.13.2-rc1
Bitcoin Bitcoin Core=0.14.0
Bitcoin Bitcoin Core=0.14.0-rc1
Bitcoin Bitcoin Core=0.14.0-rc2
Bitcoin Bitcoin Core=0.14.0-rc3
Bitcoin Bitcoin Core=0.14.1
Bitcoin Bitcoin Core=0.14.1-rc1
Bitcoin Bitcoin Core=0.14.1-rc2
Bitcoin Bitcoin Core=0.14.2
Bitcoin Bitcoin Core=0.14.2-rc1
Bitcoin Bitcoin Core=0.14.2-rc2
Bitcoin Bitcoin Core=0.14.3
Bitcoin Bitcoin Core=0.15.0
Bitcoin Bitcoin Core=0.15.0-rc1
Bitcoin Bitcoin Core=0.15.0-rc2
Bitcoin Bitcoin Core=0.15.0-rc3
Bitcoin Bitcoin Core=0.15.0.1
Bitcoin Bitcoin Core=0.15.1
Bitcoin Bitcoin Core=0.15.1-rc1
Bitcoin Bitcoin Core=0.15.2
Bitcoin Bitcoin Core=0.16.0
Bitcoin Bitcoin Core=0.16.0-rc1
Bitcoin Bitcoin Core=0.16.0-rc2
Bitcoin Bitcoin Core=0.16.0-rc3
Bitcoin Bitcoin Core=0.16.0-rc4
Bitcoin Bitcoin Core=0.16.1
Bitcoin Bitcoin Core=0.16.1-rc1
Bitcoin Bitcoin Core=0.16.1-rc2
Bitcoin Bitcoin Core=0.16.2
Bitcoin Bitcoin Core=0.16.2-rc1
Bitcoin Bitcoin Core=0.16.2-rc2
Bitcoin Bitcoin Core=0.16.3
Bitcoin Bitcoin Core=0.17.0
Event History
Mar 12, 2020
CVE Published
via MITRE·08:34 PM
Data Sourced
via MITRE·08:34 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20586?
CVE-2018-20586 is classified as a medium severity vulnerability due to its potential for data injection.
2
How do I fix CVE-2018-20586?
To fix CVE-2018-20586, upgrade your Bitcoin Core software to version 0.17.1 or later.
3
What types of systems are affected by CVE-2018-20586?
CVE-2018-20586 affects various versions of Bitcoin Core, specifically versions prior to 0.17.1.
4
What impact does CVE-2018-20586 have on the system?
CVE-2018-20586 allows an attacker to inject arbitrary data into the debug log via an RPC call.
5
Is there a workaround for CVE-2018-20586?
Currently, the only effective workaround for CVE-2018-20586 is to update to a patched version of the Bitcoin software.