View source for Common Vulnerabilities and Exposures

{| class="wikitable"
!style="width:16ex"| CVE
! Announced !! Affects !! Severity !! Attack is... !! Flaw !! Net
|-
| [[#CVE-2010-5137|CVE-2010-5137]]
| 2010-07-28
| wxBitcoin and bitcoind
|bgcolor=yellow| DoS
|bgcolor=pink| Easy
| OP_LSHIFT crash
|bgcolor=lime| 100%
|-
| [[#CVE-2010-5141|CVE-2010-5141]]
| 2010-07-28
| wxBitcoin and bitcoind
|bgcolor=pink| Theft
|bgcolor=pink| Easy
| OP_RETURN could be used to spend any output.
|bgcolor=lime| 100%
|-
| [[#CVE-2010-5138|CVE-2010-5138]]
| 2010-07-29
| wxBitcoin and bitcoind
|bgcolor=yellow| DoS
|bgcolor=pink| Easy
| Combined output overflow
|bgcolor=lime| 100%
|-
| [[#CVE-2010-5140|CVE-2010-5140]]
| 2010-09-29
| wxBitcoin and bitcoind
|bgcolor=yellow| DoS
|bgcolor=lime| Hard
| Wallet non-encryption
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/CVE-2011-4447.html 100%]
|-
| [[#CVE-2012-1909|CVE-2012-1909]]
| 2012-03-07
| Bitcoin protocol and all clients
|bgcolor=pink| Netsplit
|bgcolor=lime| Very hard
| Transaction overwriting
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/CVE-2012-1909.html 99%]
|-
| [[#CVE-2012-1910|CVE-2012-1910]]
| 2012-03-17
| bitcoind & Bitcoin-Qt for Windows
|bgcolor=pink| Unknown
|bgcolor=lime| Hard
| MingW non-multithreading
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/CVE-2012-1910.html 100%]
|-
| [[#BIP-0016|BIP 0016]]
| 2012-04-01
| All Bitcoin clients
|bgcolor=yellow| Fake Conf
|bgcolor=yellow| Miners
| Mandatory P2SH protocol update
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/BIP-0016.html 99%]
|-
| [[#CVE-2012-2459|CVE-2012-2459]]
| 2012-05-14
| bitcoind and Bitcoin-Qt
|bgcolor=pink| Netsplit&lt;ref name="Netsplit"/&gt;
|bgcolor=pink| Easy
| Block hash collision (via merkle root)
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/CVE-2012-2459.html 99%]
&lt;!--
|-
| [[#CVE-2012-3584|CVE-2012-3584]]
| 2012-06-16
| Bitcoin p2p protocol
|bgcolor=yellow| DoS&lt;ref name="DoS"/&gt;
|bgcolor=yellow| Miners&lt;ref name="MinerEasy"/&gt;
| Poor miner incentives
| (no fix)
--&gt;
|-
| '''[[CVE-2012-3789]]'''
| 2012-06-20
| bitcoind and Bitcoin-Qt
|bgcolor=yellow| DoS&lt;ref name="DoS"/&gt;
|bgcolor=pink| Easy
| (Lack of) orphan txn resource limits
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/CVE-2012-3789 99%]
|-
| [[#CVE-2012-4682|CVE-2012-4682]]
| 
| bitcoind and Bitcoin-Qt
|bgcolor=yellow| DoS&lt;ref name="DoS"/&gt;
| 
| 
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/CVE-2012-4682.html 98%]
|-
| '''[[CVE-2012-4683]]'''
| 2012-08-23
| bitcoind and Bitcoin-Qt
| bgcolor=yellow| DoS&lt;ref name="DoS"/&gt;
| bgcolor=pink| Easy
| Targeted DoS by CPU exhaustion using alerts
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/CVE-2012-4683.html 98%]
|-
| '''[[CVE-2012-4684]]'''
| 2012-08-24
| bitcoind and Bitcoin-Qt
| bgcolor=yellow| DoS&lt;ref name="DoS"/&gt;
| bgcolor=pink| Easy
| Network-wide DoS using malleable signatures in alerts
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/security.html?20124684 98%]
|-
| [[#CVE-2013-2272|CVE-2013-2272]]
| 2013-01-11
| bitcoind and Bitcoin-Qt
|bgcolor=yellow| Exposure&lt;ref name="Exposure"/&gt;
|bgcolor=pink| Easy
| Remote discovery of node's wallet addresses
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/security.html?20132272 97%]
|-
| [[#CVE-2013-2273|CVE-2013-2273]]
| 2013-01-30
| bitcoind and Bitcoin-Qt
|bgcolor=lime| Exposure&lt;ref name="Exposure"/&gt;
|bgcolor=yellow| Easy
| Predictable change output
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/security.html?20132273 97%]
|-
| [[#CVE-2013-2292|CVE-2013-2292]]
| 2013-01-30
| bitcoind and Bitcoin-Qt
|bgcolor=yellow| DoS&lt;ref name="DoS"/&gt;
|bgcolor=lime| Hard
| A transaction that takes at least 3 minutes to verify
|bgcolor=pink| [http://luke.dashjr.org/programs/bitcoin/files/charts/security.html?20132292 0%]
|-
| '''[[CVE-2013-2293]]'''
| 2013-02-14
| bitcoind and Bitcoin-Qt
|bgcolor=yellow| DoS&lt;ref name="DoS"/&gt;
|bgcolor=pink| Easy
| Continuous hard disk seek
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/security.html?20132293 97%]
|-
| [[#CVE-2013-3219|CVE-2013-3219]]
| 2013-03-11
| bitcoind and Bitcoin-Qt 0.8.0
|bgcolor=pink| Fake Conf&lt;ref name="FakeConf"/&gt;
|bgcolor=yellow| Miners&lt;ref name="MinerEasy"/&gt;
| Unenforced block protocol rule
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/security.html?20133219 100%]
|-
| [[#CVE-2013-3220|CVE-2013-3220]]
| 2013-03-11
| bitcoind and Bitcoin-Qt
|bgcolor=pink| Netsplit&lt;ref name="Netsplit"/&gt;
|bgcolor=lime| Hard
| Inconsistent BDB lock limit interactions
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/security.html?20133220 97%]
|-
| [[#BIP-0034|BIP 0034]]
| 2013-03-25
| All Bitcoin clients
|bgcolor=yellow| Fake Conf&lt;ref name="FakeConf"/&gt;
|bgcolor=yellow| Miners
| Mandatory block protocol update
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/BIP-0034.html 99%]
|-
| [[#BIP-0050|BIP 0050]]
| 2013-05-15
| All Bitcoin clients
|bgcolor=pink| Netsplit
| Hard fork to remove txid limit protocol rule
|bgcolor=lime| [http://luke.dashjr.org/programs/bitcoin/files/charts/security.html?50 97%]
|-
| [[#CVE-2013-4627|CVE-2013-4627]]
| 2013-06-??
| bitcoind and Bitcoin-Qt
|bgcolor=yellow| DoS
|bgcolor=lime| Local
| Timing leak in RPC authentication
|bgcolor=pink| [http://luke.dashjr.org/programs/bitcoin/files/charts/security.html?20134165 57%]
|-
| [[#CVE-2013-5700|CVE-2013-5700]]
| 2013-09-04
| bitcoind and Bitcoin-Qt 0.8.x
|bgcolor=yellow| DoS.

==See Also==

* [[Changelog]]

==Source==

[http://bitcoin.it/ http://bitcoin.it/]
[[Category:Bitcoin Core documentation]]