What is CVE-2013-2292?

CVE-2013-2292 is a vulnerability in Bitcoin Bitcoin_core, classified under CWE-399. Published 2013-03-12.

Is CVE-2013-2292 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Bitcoin Bitcoin_core

CVE-2013-2292

bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption) by mining a block to create a nonstandard Bitcoin transaction containing multiple OP_CHECKSIG script opcodes.

EPSS: 0.025 (83.1th percentile) — read the EPSS interpretation.

Affected products

Bitcoin Bitcoin_core — versions 0.3.4, 0.3.5, 0.3.8
Bitcoin Bitcoind — versions 0.4.4, 0.5.7, 0.6.0.0
Bitcoin Bitcoin-qt — versions 0.4, 0.4.8, 0.5.0
N/a — versions n/a

Weakness classification (CWE)

CWE-399

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2013-2292?: CVE-2013-2292 is a vulnerability in Bitcoin Bitcoin_core, classified under CWE-399. Published 2013-03-12.
Is CVE-2013-2292 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.