CVE-2024-52911 - Script Interpreter Remote Crash

<p>After Bitcoin Core 0.14.0 and before Bitcoin Core 29.0, validating a specially-crafted block may cause the node to access previously freed memory.</p> <p>During validation, necessary data required for checking inputs for each transaction is pre-calculated and cached. For specially crafted invalid blocks, it was possible for this data to be destroyed while it was still being accessed by a background validation thread. An attacker capable of mining a block with sufficient proof-of-work could have exploited this to crash victim nodes. Because of the nature of use-after-free bugs, it is possible that the crash could have been used for remote code execution, though constraints on the input (bl

Источник

Bitcoin Core

Краткий отрывок на языке оригинала. Полный материал — на сайте источника.

Открыть первоисточник

Copyright (c) 2014 Michael Rose; 2015 Sylvain Durand; 2016 Respective Authors. MIT License. Excerpt. MIT

Комментарии

Без регистрации. Имя и комментарий будут видны всем.

Имя: 2–60 символов. Комментарий: 3–2000 символов. Только текст. Не чаще одного комментария в минуту и пяти в час.

Загружаем комментарии…