medium6.4
CVE-2013-3220
bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider wheth…
Impact
bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider whether a block's size could require an excessive number of database locks, which allows remote attackers to cause a denial of service (split) and enable certain double-spending capabilities via a large block that triggers incorrect Berkeley DB locking.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bitcoin | Bitcoin-Qt | through 0.4.9 Versions 0.4, 0.4.8, 0.5.0, 0.5.0.4, 0.5.1 |
| Bitcoin | Bitcoin Core | All versions Versions 0.3.4, 0.3.5, 0.3.8, 0.3.10, 0.3.11 |
| Bitcoin | Bitcoind | through 0.4.9 Versions 0.4.4, 0.5.7, 0.5.8, 0.6.0.0, 0.6.0.10 |
| Bitcoin | Qitcoin-Qt | Versions 0.6.4, 0.6.5 |