What is CVE-2013-2293?

CVE-2013-2293 is a vulnerability in Bitcoin Bitcoin_core, classified under CWE-399. Published 2013-03-12.

Is CVE-2013-2293 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Bitcoin Bitcoin_core

CVE-2013-2293

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O…

EPSS: 0.025 (83.0th percentile) — read the EPSS interpretation.

Affected products

Bitcoin Bitcoin_core — versions 0.3.4, 0.3.5, 0.3.8
Bitcoin Bitcoind — versions 0.4.4, 0.5.7, 0.6.0.0
Bitcoin Bitcoin-qt — versions 0.4, 0.4.8, 0.5.0
N/a — versions n/a

Weakness classification (CWE)

CWE-399

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2013-2293?: CVE-2013-2293 is a vulnerability in Bitcoin Bitcoin_core, classified under CWE-399. Published 2013-03-12.
Is CVE-2013-2293 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.