CVE-2024-35202

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Oct 10, 2024

Updated: Oct 15, 2024

CWE ID 770

Summary

CVE-2024-35202 is a newly disclosed vulnerability in Bitcoin Core versions prior to 25.0. It allows remote attackers to trigger a denial of service condition by submitting transactions that are not committed to the block's merkle root. This issue arises due to the function "FillBlock" being called twice for a single "PartiallyDownloadedBlock" instance. Consequently, the Bitcoin Core node may assert and eventually exit, leading to a denial of service.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

CORE

Affected Vendors

JET Charge Pty Ltd

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/v5kEUz
https://www.cve.org/CVERecord?id=CVE-2024-35202
https://nvd.nist.gov/vuln/detail/CVE-2024-35202

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners