fkie_cve-2018-20586
Vulnerability from fkie_nvd
Published
2020-03-12 21:15
Modified
2024-11-21 04:01
Severity ?
Summary
bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.
References
| ▶ | URL | Tags | |
|---|---|---|---|
| cve@mitre.org | https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586 | Exploit, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586 | Exploit, Vendor Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "14CC1402-251D-441D-921F-E6D0933831D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "07B7FF50-0406-4648-B873-2F30D711889E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "4E04A666-9C60-4835-A97A-4354FDDB3A19",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc4:*:*:*:*:*:*",
"matchCriteriaId": "D0742D09-FAFF-4F84-87A8-372ABEE07B9E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc5:*:*:*:*:*:*",
"matchCriteriaId": "D920FDBD-18C5-4252-95C8-18342739F00E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:-:*:*:*:*:*:*",
"matchCriteriaId": "C1E3D81A-E732-4580-BD06-484BBB78F460",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "85F32470-AEE3-498E-99D1-AFCB88813D24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C3179A1E-0730-4120-BF67-8F1BA2F84DE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13:*:*:*:*:*:*:*",
"matchCriteriaId": "5E2A6D5F-6633-4A00-A0A0-FA75EF85F995",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:-:*:*:*:*:*:*",
"matchCriteriaId": "4EB034E6-2DEF-475B-A988-342CBE5E3C48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "FC725933-01E7-457C-ADA8-B61CB9D8B5B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "1C085D41-3632-4285-B951-6BB64625023D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "25743E75-EE87-4DFD-8DF5-A367602F2640",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:-:*:*:*:*:*:*",
"matchCriteriaId": "AD791670-C4F8-486E-A891-E49BAC240F9B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "F32CC982-950A-4EE7-AECC-972FBFB71606",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C30AEEE6-BB5A-4B85-90E8-7D9E3C71A9AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "16F7423D-02CD-4734-A598-784F448DFD76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:-:*:*:*:*:*:*",
"matchCriteriaId": "1834BD1D-59B2-471C-84C1-588A276B4087",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "D8B8D112-ADF2-4441-9C3B-0E8188F51540",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:-:*:*:*:*:*:*",
"matchCriteriaId": "120F19E5-E58D-4E40-8BA4-B0A6465FDC0E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "A4E12E54-BB09-472B-93A6-12A77AF854AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "4775D0C9-AB2E-459B-925F-B1832E2F142C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E5E1FAB0-FAB8-484C-B9F6-D85775DF2908",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:-:*:*:*:*:*:*",
"matchCriteriaId": "8E03BEFD-5E87-4704-9E42-6A6A3D56078E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "1790406B-3447-46A1-8E71-32BB31A6BA79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "2D8AE957-086A-4AE1-8C90-2263A5ADF175",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:-:*:*:*:*:*:*",
"matchCriteriaId": "7CC69D1A-A88C-4D7C-9583-705E6BD09309",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7D126937-7A31-4E1D-9CD7-5A2FB4FBCA99",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A5297725-6D47-4C73-BFA1-7332609CC90A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2AA05B76-AC3F-492E-8CF1-18F20ABF05BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:-:*:*:*:*:*:*",
"matchCriteriaId": "1559EDBE-5654-48A2-8DB2-DAE50AAC7D1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "5E4632E3-0D58-42EC-931C-4B8477694489",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "B199B1BC-6AA5-441A-A8D8-64B98CC6D52E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "952CE418-B490-487D-9893-0A3F4C30B992",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7AAFA18E-4DC6-4FCD-8459-C9E8D5177685",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:-:*:*:*:*:*:*",
"matchCriteriaId": "A727FB31-FD4F-4AA0-821B-8D1B4B653D14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0962E3AF-CD06-4DDF-B64E-F537F4646D87",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5DCF8D36-67BB-4C75-9EC5-688FED31085E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:-:*:*:*:*:*:*",
"matchCriteriaId": "E8516496-5BEF-4698-8D32-6C1C7AD0734C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0F20180A-B4E5-47EB-816D-50B1E1D85B44",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "15341D0B-9B8C-4DB5-90A2-F4CD938E9FC0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "EBE19710-731E-48BE-B4E3-77F851D670E4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc4:*:*:*:*:*:*",
"matchCriteriaId": "DA04CEED-B65D-4369-A03C-8AFBEDDBE4F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:-:*:*:*:*:*:*",
"matchCriteriaId": "1FCF76F3-2051-42BC-B742-6C631EBA1B84",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E760CF3A-4ABE-48C0-9219-699A3A524B8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "35A3299D-4AEC-4435-AC20-AB3ECB76E490",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:-:*:*:*:*:*:*",
"matchCriteriaId": "6FCFB843-B726-4FF4-ADC5-E78D16D8579E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "BC88FE65-B525-46D2-A4F4-02F5906744D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "170B7847-9A1A-42E2-9376-BCC4D6CE7279",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.3:*:*:*:*:*:*:*",
"matchCriteriaId": "EA98291E-418D-4184-887D-2BD3F4723503",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.17.0:-:*:*:*:*:*:*",
"matchCriteriaId": "0C9CB378-9964-46BC-A6B2-3678C29DA37A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call."
},
{
"lang": "es",
"value": "bitcoind y Bitcoin-Qt versiones anteriores a 0.17.1, permiten una inyecci\u00f3n de datos arbitrarios en el registro de depuraci\u00f3n por medio de una llamada RPC."
}
],
"id": "CVE-2018-20586",
"lastModified": "2024-11-21T04:01:47.390",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-03-12T21:15:12.623",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-116"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…