Approved changes feed: RSS · Atom

cpe:2.3:a:bitcoin:bitcoind:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBitcoin (bc70d995-d40a-5f95-8971-051d32c09c9d)
ProductBitcoind (195b0582-c923-54ff-8a65-f02d63bdbf39)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/bitcoin purl2cpe 2026-06-01 10:15:09.782965
pkg:rpm/opensuse/bitcoind purl2cpe 2026-06-01 10:15:09.782969

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-10725 vulnerable 2026-06-08 05:07:25.640314 Details available
In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts) because operations occur in the wrong order. This behavior occurs in the remote network alert system (deprecated since Q1 2016). This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins.
Published: 2018-07-05T22:00:00.000Z
Updated: 2024-08-06T03:30:20.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10724 vulnerable 2026-06-08 05:07:25.639804 Details available
Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins.
Published: 2018-07-05T22:00:00.000Z
Updated: 2024-08-06T03:30:20.178Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.