bitcoin-dev

Public disclosure of three vulnerabilities affecting Bitcoin Core <v25.0

Public disclosure of three vulnerabilities affecting Bitcoin Core <v25.0

Original Postby Niklas Goegge

Posted on: October 9, 2024 19:30 UTC

The recent communication highlights significant security vulnerabilities identified in Bitcoin Core versions preceding 25.0, marking an important development for users and contributors alike.

These vulnerabilities are meticulously documented and can be found through the provided links, which include detailed discussions on issues like mutated blocks hindering propagation, challenges with sending large inventories, and a specific vulnerability that could lead to a crash when processing block transactions. The URLs for these vulnerabilities are as follows: issues related to mutated blocks are documented at https://bitcoincore.org/en/2024/10/08/disclose-mutated-blocks-hindering-propagation/, problems regarding the sending of large inventories at https://bitcoincore.org/en/2024/10/08/disclose-large-inv-to-send/, and the vulnerability leading to crashes during block transaction processing is outlined at https://bitcoincore.org/en/2024/10/08/disclose-blocktxn-crash/.

Furthermore, this announcement signifies the progressive adoption of a new vulnerability disclosure policy by the project, aimed at enhancing transparency and security measures within the Bitcoin Core community. This policy initiative represents a step forward in addressing and mitigating potential risks associated with digital currency transactions and systems. The full details of this new policy framework can be accessed at https://bitcoincore.org/en/security-advisories/policy.

Additionally, there is a commitment to continue this line of communication, with an anticipation of disclosing any vulnerabilities affecting versions before 26.0 in the upcoming month, should they exist. This ongoing effort underscores the project's dedication to security and its proactive stance on informing and protecting its user base against possible threats.