Vulnerability in Bitcoin Bitcoin_core
CVE-2011-4447
The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from B…
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.016 (73.2th percentile) — read the EPSS interpretation.
Affected products
- Bitcoin Bitcoin_core — versions 0.4.0, 0.4.1, 0.5.0
- Bitcoin Wxbitcoin — versions 0.4.0, 0.4.1, 0.5.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2011-4447?
- CVE-2011-4447 is a vulnerability in Bitcoin Bitcoin_core, classified under Cryptographic Issues. Published 2012-08-06.
- Is CVE-2011-4447 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.