CVE-2018-20587 | BDVDB-2026-112696 Detail

Description#

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20587
https://medium.com/%40lukedashjr/cve-2018-20587-advisory-and-full-disclosure-a3105551e78b

Exploit#

No public exploit known

History#

Version 12019-02-11Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.