NetSight
medium5.3

CVE-2018-20586

bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.

Impact

bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.

Affected products

VendorProductAffected versions
BitcoinBitcoin Core
Versions 0.12.0, 0.12.1, 0.13, 0.13.0, 0.13.1, 0.13.2

Weakness classification

References