Bitcoin Core denial-of-service flaw reported on Windows, macOS, and BSD nodes
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Bitcoin Core
- Product
- Bitcoin Core node software
- First seen
Summary
A SecurityOnline post reports a Bitcoin Core denial-of-service vulnerability that lets remote peers trigger out-of-memory crashes through TCP socket handling errors. The item gives no CVE or patch details.
If you use Bitcoin Core
Update Bitcoin Core to the latest patched release
Check the Bitcoin Core release notes for the fix
Limit exposure of node peer ports where possible
Upgrade Bitcoin Core to 29.5, 30.4, 31.2, 32.1 or later, matching your release branch.
Monitor node memory usage and restart policies until patched.
Check Bitcoin Core release notes for a fixed version
What the sources say 4
· Mastodon: “A Bitcoin Core DoS vulnerability allows remote peers to trigger out-of-memory crashes on Windows, macOS, and BSD nodes via TCP socket handling errors.” Source
· Mastodon: “Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit” Source
· Mastodon: “Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.” Source
· Mastodon: “Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.” Source