CVE-2017-12842
Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. Completing the attack would cost more than a million dollars, and is relevant mainly only in situations where an autonomous system relies solely on an SPV proof for transactions of a greater dollar amount.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 2.22% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- bitcoin/bitcoin core
- Source
- cve@mitre.org
References
- https://bitslog.wordpress.com/2018/06/09/leaf-node-weakness-in-bitcoin-merkle-tree-design/Third Party Advisory
- https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_ExposuresVendor Advisory
- https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-February/016697.htmlThird Party Advisory
- https://bitslog.wordpress.com/2018/06/09/leaf-node-weakness-in-bitcoin-merkle-tree-design/Third Party Advisory
- https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_ExposuresVendor Advisory
- https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-February/016697.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.