medium5.0
CVE-2013-2272
The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.…
Impact
The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet addresses and IP addresses via a series of large Bitcoin transactions with insufficient fees.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bitcoin | Bitcoin-Qt | through 0.4.8 Versions 0.4, 0.5.0, 0.5.0.4, 0.5.1, 0.5.3.0 |
| Bitcoin | Bitcoin Core | All versions Versions 0.3.4, 0.3.5, 0.3.8, 0.3.10, 0.3.11 |
| Bitcoin | Bitcoind | through 0.4.4 Versions 0.5.7, 0.6.0.0, 0.6.0.10, 0.6.3, 0.6.4 |