What is CVE-2013-3219?

CVE-2013-3219 is a vulnerability in Bitcoin Core, classified under CWE-264. Published 2013-08-02.

Is CVE-2013-3219 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Bitcoin Core

CVE-2013-3219

bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which allows remote attackers to bypass intended access restrictions and conduct double-spending attacks via a large block that triggers incorrect Berkeley DB locking in older product versions.

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

Affected products

Bitcoin Bitcoin_core — versions 0.8.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

ARPSyndicate/cvemon
uvhw/conchimgiangnang

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2013-3219?: CVE-2013-3219 is a vulnerability in Bitcoin Core, classified under CWE-264. Published 2013-08-02.
Is CVE-2013-3219 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.