NetSight
medium5.0

CVE-2010-5140

wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, which allows remote att…

Impact

wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, which allows remote attackers to cause a denial of service (invalid-transaction flood) by sending low-valued transactions without transaction fees.

Affected products

VendorProductAffected versions
BitcoinBitcoin Core
through 0.3.12
Versions 0.3.4, 0.3.5, 0.3.8, 0.3.10, 0.3.11
BitcoinWxbitcoin
through 0.3.12
Versions 0.3.4, 0.3.5, 0.3.8, 0.3.10, 0.3.11

Weakness classification

References