CVE-2021-3195: Input Validation
DISPUTED bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-3195?
CVE-2021-3195 is classified as a disputed vulnerability with potential implications depending on specific fork security models.
How do I fix CVE-2021-3195?
To mitigate CVE-2021-3195, users should upgrade to Bitcoin Core version 0.21.1 or later.
What does CVE-2021-3195 involve?
CVE-2021-3195 involves the ability of bitcoind to create files in arbitrary directories through a dumpwallet RPC call.
Can CVE-2021-3195 affect my security model?
While CVE-2021-3195 does not violate the Bitcoin Core security model, it may pose risks to modified forks of Bitcoin.
Which versions of Bitcoin Core are affected by CVE-2021-3195?
CVE-2021-3195 affects all Bitcoin Core versions up to and including 0.21.0.