VIR Vulnerability Intelligence Relay

CVE-2012-4684

high
Published 2013-03-12 · Modified 2026-04-29
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8

Description

The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service (resource consumption) via a valid modified signature for a circulating alert.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact
VendorProductVersionsFixed
bitcoinbitcoin-qt0.6.3
bitcoinbitcoin_core0.3.4
bitcoinbitcoin_core0.3.5
bitcoinbitcoin_core0.3.8
bitcoinbitcoin_core0.3.10
bitcoinbitcoin_core0.3.11
bitcoinbitcoin_core0.3.12
bitcoinbitcoin_core0.4.0
bitcoinbitcoin_core0.4.1
bitcoinbitcoin_core0.4.2
bitcoinbitcoin_core0.4.3
bitcoinbitcoin_core0.4.4
bitcoinbitcoin_core0.4.5
bitcoinbitcoin_core0.4.6
bitcoinbitcoin_core0.4.7
bitcoinbitcoin_core0.5.0
bitcoinbitcoin_core0.5.3
bitcoinbitcoin_core0.5.3.1
bitcoinbitcoin_core0.5.4
bitcoinbitcoin_core0.5.5
bitcoinbitcoin_core0.5.6
bitcoinbitcoin_core0.6.0.1
bitcoinbitcoin_core0.6.0.2
bitcoinbitcoin_core0.6.0.3
bitcoinbitcoin_core0.6.0.4
bitcoinbitcoin_core0.6.0.5
bitcoinbitcoin_core0.6.0.6
bitcoinbitcoin_core0.6.0.7
bitcoinbitcoin_core0.6.0.8
bitcoinbitcoin_core0.6.1
bitcoinbitcoin_core0.6.2
bitcoinbitcoind0.6.3
bitcoinwxbitcoin0.3.4
bitcoinwxbitcoin0.3.5
bitcoinwxbitcoin0.3.8
bitcoinwxbitcoin0.3.10
bitcoinwxbitcoin0.3.11
bitcoinwxbitcoin0.4.0
bitcoinwxbitcoin0.4.1
bitcoinwxbitcoin0.5.0

References

CWEs

CWE-399

Verify integrity in audit chain (admin only). AS-IS.