CVE-2010-5140

Bitcoin Core < 0.3.13 and wxBitcoin < 0.3.13 - Denial of Service via Invalid Transaction Flood

Title source: llm
STIX 2.1

Description

wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, which allows remote attackers to cause a denial of service (invalid-transaction flood) by sending low-valued transactions without transaction fees.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://en.bitcoin.it/wiki/CVEs
Various Sources x_refsource_confirm
http://www.bitcoin.org/smf/index.php?topic=1306.0

Scores

EPSS 0.0230
EPSS Percentile 81.3%

Details

CWE
CWE-119
Status published
Products (12)
bitcoin/bitcoin_core 0.3.4
bitcoin/bitcoin_core 0.3.5
bitcoin/bitcoin_core 0.3.8
bitcoin/bitcoin_core 0.3.10
bitcoin/bitcoin_core 0.3.11
bitcoin/bitcoin_core < 0.3.12
bitcoin/wxbitcoin 0.3.4
bitcoin/wxbitcoin 0.3.5
bitcoin/wxbitcoin 0.3.8
bitcoin/wxbitcoin 0.3.10
... and 2 more
Published Aug 06, 2012
Tracked Since Feb 18, 2026