Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0052-1 advisory.

  - Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x     through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitable by miners     via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash. (CVE-2018-17144)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for bitcoin to version 0.16.3 fixes the following issues :

  - CVE-2018-17144: Prevent remote denial of service     (application crash) exploitable by miners via duplicate     input (bsc#1108992).

For additional changes please check the changelog.

Bitcoin Core reports :

CVE-2018-17144, a fix for which was released on September 18th in Bitcoin Core versions 0.16.3 and 0.17.0rc4, includes both a Denial of Service component and a critical inflation vulnerability. It was originally reported to several developers working on Bitcoin Core, as well as projects supporting other cryptocurrencies, including ABC and Unlimited on September 17th as a Denial of Service bug only, however we quickly determined that the issue was also an inflation vulnerability with the same root cause and fix.

ID	Name	Product	Family	Severity
190618	openSUSE 15 Security Update : bitcoin (openSUSE-SU-2024:0052-1)	Nessus	SuSE Local Security Checks	high
123316	openSUSE Security Update : bitcoin (openSUSE-2019-731)	Nessus	SuSE Local Security Checks	high
117929	openSUSE Security Update : bitcoin (openSUSE-2018-1098)	Nessus	SuSE Local Security Checks	high
117845	FreeBSD : bitcoin -- Denial of Service and Possible Mining Inflation (40a844bf-c430-11e8-96dc-000743165db0)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2018-17144

high

Tenable Plugins

high

high

high

high