CVE-2024-52912: Integer Overflow
Published Nov 18, 2024
·Updated
Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connecting peers) and an abs64 logic bug.
Affected Software
2 affected components
Bitcoin Core<0.21.0
Bitcoin Bitcoin Core<0.21.0
Event History
Nov 18, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-52912?
CVE-2024-52912 is considered a critical vulnerability due to the potential for a network split and the impact on Bitcoin Core functionality.
2
How do I fix CVE-2024-52912?
To fix CVE-2024-52912, upgrade your Bitcoin Core installation to version 0.21.0 or later.
3
What are the potential impacts of CVE-2024-52912?
The impacts of CVE-2024-52912 include possible network splits and inconsistencies in time offset calculations for newly connecting peers.
4
Who is affected by CVE-2024-52912?
Users of Bitcoin Core versions before 0.21.0 are affected by CVE-2024-52912.
5
What causes CVE-2024-52912?
CVE-2024-52912 is caused by an integer overflow issue that affects time offset calculations leading to incorrect peer connections.