CVE-2024-35202

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-35202

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35202.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-35202

Downstream

openSUSE (2)

Related

openSUSE (2)

Published

2024-10-10T00:00:00Z

Modified

2026-10-28T02:31:12Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message that are not committed to in a block's merkle root. FillBlock can be called twice for one PartiallyDownloadedBlock instance.

Database specific

{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35202.json"
}

References

Affected packages

Git / github.com/bitcoin/bitcoin

Affected ranges

Type

GIT

Repo

https://github.com/bitcoin/bitcoin

Events

Introduced

Fixed

8105bce5b384c72cf08b25b7c5343622754e7337

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "25.0"
                }
            ],
            "source": "DESCRIPTION"
        },
        {
            "original_tag": "v25.0",
            "range": [
                {
                    "fixed": "8105bce5b384c72cf08b25b7c5343622754e7337"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "cpe": "cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "25.0"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

Other

noversion

v0.*

v0.3.1

v0.3.11_notexact

v0.3.1rc1

v0.3.2

v0.3.20

v0.3.20.01_closest

v0.3.20.2_closest

v0.3.21

v0.3.21rc

v0.3.22

v0.3.22rc1

v0.3.22rc2

v0.3.22rc3

v0.3.22rc4

v0.3.23

v0.3.23rc1

v0.3.24

v0.3.24rc1

v0.3.24rc2

v0.3.24rc3

v0.3.3

v0.3.6

v0.3.7

v0.3.8

v0.4.0

v0.4.00rc1

v0.4.00rc2

v0.5.0

v0.5.0rc1

v0.5.0rc2

v0.5.0rc4

v0.5.0rc5

v0.5.0rc6

v0.5.0rc7

v0.5.1

v0.5.1rc1

v0.5.1rc2

v0.6.0

v0.6.0rc1

v0.6.0rc2

v0.6.0rc3

v0.6.0rc4

v0.6.0rc5

v0.6.0rc6

v0.6.1

v0.6.1rc1

v0.6.1rc2

v0.7.0

v0.7.0rc1

v0.7.0rc2

v0.7.0rc3

v0.7.1

v0.7.1rc1

v0.8.0

v0.8.0rc1

v0.8.2

v0.8.2rc1

v0.8.2rc2

v0.8.2rc3

v0.9.0rc1

v0.9.0rc2

v21.*

v21.99-guixtest1

v25.*

v25.0rc1

v25.0rc2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35202.json"