What is CVE-2024-34478?

CVE-2024-34478 is a high-severity vulnerability in Btcd Project, classified under CWE-436. CVSS score: 7.5/10. Published 2024-05-05.

How severe is CVE-2024-34478?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Btcd Project

CVE-2024-34478

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds.

EPSS: 0.006 (43.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Btcd_project Btcd
N/a — versions n/a

Weakness classification (CWE)

CWE-436

References

cve@mitre.org (Issue Tracking)
cve@mitre.org (Product)
cve@mitre.org (Product)

Frequently asked questions

What is CVE-2024-34478?: CVE-2024-34478 is a high-severity vulnerability in Btcd Project, classified under CWE-436. CVSS score: 7.5/10. Published 2024-05-05.
How severe is CVE-2024-34478?: High severity. CVSS v3 base score is 7.5 out of 10.