CVE-2019-15947: High severity bitcoin vulnerability
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15947?
CVE-2019-15947 is considered a high-severity vulnerability due to the risk of exposing private keys from wallet.dat files.
How do I fix CVE-2019-15947?
To fix CVE-2019-15947, upgrade to Bitcoin Core version 0.19.0 or later, which addresses this issue.
What impact does CVE-2019-15947 have on users?
CVE-2019-15947 potentially allows attackers to recover sensitive wallet information if core dumps are mishandled.
Is CVE-2019-15947 specific to any Bitcoin Core versions?
Yes, CVE-2019-15947 specifically affects Bitcoin Core version 0.18.0.
What steps should I take if I have already been affected by CVE-2019-15947?
If affected by CVE-2019-15947, immediately check for core dumps and ensure your wallet.dat is secure, considering regenerations of private keys.