CVE-2016-10724

State: Published
Severity: Not scored
Published: Jul 5, 2018
Updated: Aug 6, 2024
Reserved: Jun 24, 2018

Description

Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-July/016189.html
https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
https://github.com/JinBean/CVE-Extension
https://bitcoin.org/en/posts/alert-key-and-vulnerabilities-disclosure

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.