CVE-2024-52911 - Script Interpreter Remote Crash
<p>After Bitcoin Core 0.14.0 and before Bitcoin Core 29.0, validating a specially-crafted block may cause the node to access previously freed memory.</p> <p>During validation, necessary data required for checking inputs for each transaction is pre-calculated and cached. For specially crafted invalid blocks, it was possible for this data to be destroyed while it was still being accessed by a background validation thread. An attacker capable of mining a block with sufficient proof-of-work could have exploited this to crash victim nodes. Because of the nature of use-after-free bugs, it is possible that the crash could have been used for remote code execution, though constraints on the input (bl
Bitcoin Core
Краткий отрывок на языке оригинала. Полный материал — на сайте источника.
Открыть первоисточникCopyright (c) 2014 Michael Rose; 2015 Sylvain Durand; 2016 Respective Authors. MIT License. Excerpt. MIT
Комментарии
Без регистрации. Имя и комментарий будут видны всем.
Загружаем комментарии…