Common Vulnerabilities and Exposures: Difference between revisions

From Bitcoin Wiki
Jump to navigation Jump to search
Luke-jr (talk | contribs)
Mention historical incidents, even if they didn't get CVEs
Luke-jr (talk | contribs)
Historical CVEs
Line 3: Line 3:
! Announced !! Affects !! Flaw !! Fixed in versions !! Links
! Announced !! Affects !! Flaw !! Fixed in versions !! Links
|-
|-
|
| CVE-2010-5137
| 2010-07-28
| 2010-07-28
| wxBitcoin and bitcoind
| wxBitcoin and bitcoind
Line 10: Line 10:
| [[Incidents#LSHIFT and RETURN bugs|Incident]]
| [[Incidents#LSHIFT and RETURN bugs|Incident]]
|-
|-
|
| CVE-2010-5138
| 2010-07-29
| 2010-07-29
| wxBitcoin and bitcoind
| wxBitcoin and bitcoind
Line 17: Line 17:
| [[Incidents#OP CHECKSIG abuse|Incident]]
| [[Incidents#OP CHECKSIG abuse|Incident]]
|-
|-
|
| CVE-2010-5139
| 2010-08-15
| 2010-08-15
| wxBitcoin and bitcoind
| wxBitcoin and bitcoind
Line 24: Line 24:
| [[Incidents#Value overflow|Incident]] [https://bitcointalk.org/index.php?topic=822.0 Discovery]
| [[Incidents#Value overflow|Incident]] [https://bitcointalk.org/index.php?topic=822.0 Discovery]
|-
|-
|
| CVE-2010-5140
| 2010-09-29
| 2010-09-29
| wxBitcoin and bitcoind
| wxBitcoin and bitcoind

Revision as of 20:06, 29 May 2012

CVE Announced Affects Flaw Fixed in versions Links
CVE-2010-5137 2010-07-28 wxBitcoin and bitcoind OP_LSHIFT crash 0.3.5 Incident
CVE-2010-5138 2010-07-29 wxBitcoin and bitcoind Unlimited SigOp DoS 0.3.? Incident
CVE-2010-5139 2010-08-15 wxBitcoin and bitcoind Combined output overflow 0.3.11 Incident Discovery
CVE-2010-5140 2010-09-29 wxBitcoin and bitcoind Sending coins w/o sufficient fees 0.3.13 Incident Initial reports
CVE-2011-4447 2011-11-11 wxBitcoin and bitcoind Wallet (non-)encryption 0.4.1, 0.5.0 Announcement Finding 0.5.0
CVE-2012-1909 2012-03-07 Bitcoin protocol Transaction overwriting BIP 30, 0.4.4, 0.5.3 Announcement Fix
CVE-2012-1910 2012-03-17 Bitcoin-Qt for Windows MingW non-multithreading 0.5.3.1, 0.5.4, 0.6.0rc4 Announcement
CVE-2012-2459 2012-05-14 bitcoind and Bitcoin-Qt TBD 0.4.6, 0.5.5, 0.6.0.7, and 0.6.2 Announcement