vipinsun/bitcoin

Bitcoin Core integration/staging tree

bitcoin's Issues

bitcoinv21.99-guixtest1: 1 vulnerabilities (highest severity is: 5.3)

Vulnerable Library - bitcoinv21.99-guixtest1

Bitcoin Core integration/staging tree

Library home page: https://github.com/bitcoin/bitcoin.git

Vulnerable Source Files (1)

/src/policy/policy.h

Vulnerabilities

CVE	Severity	CVSS	Dependency	Type	Fixed in (bitcoinv21.99-guixtest1 version)	Remediation Possible**
CVE-2023-50428	Medium	5.3	detected in multiple dependencies	Direct	N/A	❌

**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation

Details

CVE-2023-50428

Vulnerable Libraries - bitcoinv21.99-guixtest1, bitcoinv21.99-guixtest1, bitcoinv21.99-guixtest1, bitcoinv21.99-guixtest1

Vulnerability Details

In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023.

Publish Date: 2023-12-09

URL: CVE-2023-50428

CVSS 3 Score Details (5.3)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: Low

For more information on CVSS3 Scores, click here.

Step up your Open Source Security Game with Mend here