CVE-2013-2293

2022-10-0316:15:00

mitre

www.cve.org

ctransaction

fetchinputs

denial of service

bitcoin transaction

disk i/o

remote attackers

6.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.5%

JSON

The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O consumption) via a Bitcoin transaction with many inputs corresponding to many different parts of the stored block chain.