CVE-2023-33297: High severity Bitcoin Bitcoin Core vulnerability
Published May 22, 2023
·Updated
Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023.
Affected Software
1 affected component
Bitcoin Bitcoin Core<24.1
Remediation
Patch Available
Event History
May 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-33297?
CVE-2023-33297 has a high severity level as it can lead to a denial of service due to inefficient queue management.
2
How do I fix CVE-2023-33297?
To fix CVE-2023-33297, upgrade to Bitcoin Core version 24.1 or later.
3
What exploitation methods are associated with CVE-2023-33297?
CVE-2023-33297 can be exploited by draining the inventory-to-send queue, resulting in increased CPU consumption.
4
In which versions of Bitcoin Core is CVE-2023-33297 present?
CVE-2023-33297 is present in all versions of Bitcoin Core prior to 24.1.
5
When was CVE-2023-33297 first exploited in the wild?
CVE-2023-33297 was first exploited in the wild in May 2023.