What is CVE-2010-5138?

CVE-2010-5138 is a vulnerability in Bitcoin Bitcoin_core. Published 2012-08-06.

Is CVE-2010-5138 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Bitcoin Bitcoin_core

CVE-2010-5138

wxBitcoin and bitcoind 0.3.x allow remote attackers to cause a denial of service (electricity consumption) via a Bitcoin transaction containing multiple OP_CHECKSIG script opcodes.

EPSS: 0.020 (77.9th percentile) — read the EPSS interpretation.

Affected products

Bitcoin Bitcoin_core — versions 0.3.4, 0.3.5
Bitcoin Wxbitcoin — versions 0.3.4, 0.3.5
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cvemon
akircanski/coinbugs
uvhw/conchimgiangnang
uvhw/wallet.cpp

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2010-5138?: CVE-2010-5138 is a vulnerability in Bitcoin Bitcoin_core. Published 2012-08-06.
Is CVE-2010-5138 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.