What is CVE-2013-2273?

CVE-2013-2273 is a vulnerability in Bitcoin Core, classified under Information Disclosure. Published 2013-03-12.

Is CVE-2013-2273 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Bitcoin Core

CVE-2013-2273

bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote attackers to obtain potentially sensitive information about returned change by leveraging certain predictability in the outputs of a Bitcoin transaction.

Vulnerability class: Information Disclosure

EPSS: 0.019 (77.7th percentile) — read the EPSS interpretation.

Affected products

Bitcoin Bitcoin_core — versions 0.3.4, 0.3.5, 0.3.8
Bitcoin Bitcoind — versions 0.5.7, 0.6.0.0, 0.6.0.10
Bitcoin Bitcoin-qt — versions 0.4, 0.5.0, 0.5.0.4
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2013-2273?: CVE-2013-2273 is a vulnerability in Bitcoin Core, classified under Information Disclosure. Published 2013-03-12.
Is CVE-2013-2273 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.