{"id":"CVE-2018-20586","details":"bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.","modified":"2026-10-24T10:30:32.583401113Z","published":"2020-03-12T21:15:12.623Z","database_specific":{},"references":[{"type":"EVIDENCE","url":"https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bitcoin/bitcoin","events":[{"introduced":"3d5cf698d60eaa22ede6937207a205aede4212ff"},{"last_affected":"e1ed37edaedc85b8c3468bd9a726046344036243"}],"database_specific":{"extracted_events":[{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc1:*:*:*:*:*:*","range":[{"introduced":"0.12.0-rc1"},{"last_affected":"0.12.0-rc1"}]},{"range":[{"introduced":"0.12.0-rc2"},{"last_affected":"0.12.0-rc2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc2:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc3:*:*:*:*:*:*","range":[{"introduced":"0.12.0-rc3"},{"last_affected":"0.12.0-rc3"}],"source":"CPE_STRING"},{"range":[{"introduced":"0.12.0-rc4"},{"last_affected":"0.12.0-rc4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc4:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc5:*:*:*:*:*:*","range":[{"introduced":"0.12.0-rc5"},{"last_affected":"0.12.0-rc5"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:-:*:*:*:*:*:*","range":[{"introduced":"0.12.1-NA"},{"last_affected":"0.12.1-NA"}],"source":"CPE_STRING"},{"range":[{"introduced":"0.12.1-rc1"},{"last_affected":"0.12.1-rc1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc1:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc2:*:*:*:*:*:*","range":[{"introduced":"0.12.1-rc2"},{"last_affected":"0.12.1-rc2"}]},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13:*:*:*:*:*:*:*","range":[{"introduced":"0.13"},{"last_affected":"0.13"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:-:*:*:*:*:*:*","range":[{"introduced":"0.13.0-NA"},{"last_affected":"0.13.0-NA"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc1:*:*:*:*:*:*","range":[{"introduced":"0.13.0-rc1"},{"last_affected":"0.13.0-rc1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc2:*:*:*:*:*:*","range":[{"introduced":"0.13.0-rc2"},{"last_affected":"0.13.0-rc2"}]},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc3:*:*:*:*:*:*","range":[{"introduced":"0.13.0-rc3"},{"last_affected":"0.13.0-rc3"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:-:*:*:*:*:*:*","range":[{"introduced":"0.13.1-NA"},{"last_affected":"0.13.1-NA"}],"source":"CPE_STRING"},{"range":[{"introduced":"0.13.1-rc1"},{"last_affected":"0.13.1-rc1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc1:*:*:*:*:*:*"},{"range":[{"introduced":"0.13.1-rc2"},{"last_affected":"0.13.1-rc2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc2:*:*:*:*:*:*"},{"range":[{"introduced":"0.13.1-rc3"},{"last_affected":"0.13.1-rc3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc3:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:-:*:*:*:*:*:*","range":[{"introduced":"0.13.2-NA"},{"last_affected":"0.13.2-NA"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:rc1:*:*:*:*:*:*","range":[{"introduced":"0.13.2-rc1"},{"last_affected":"0.13.2-rc1"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:-:*:*:*:*:*:*","range":[{"introduced":"0.14.0-NA"},{"last_affected":"0.14.0-NA"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc1:*:*:*:*:*:*","range":[{"introduced":"0.14.0-rc1"},{"last_affected":"0.14.0-rc1"}],"source":"CPE_STRING"},{"range":[{"introduced":"0.14.0-rc2"},{"last_affected":"0.14.0-rc2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc2:*:*:*:*:*:*"},{"range":[{"introduced":"0.14.0-rc3"},{"last_affected":"0.14.0-rc3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc3:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:-:*:*:*:*:*:*","range":[{"introduced":"0.14.1-NA"},{"last_affected":"0.14.1-NA"}],"source":"CPE_STRING"},{"range":[{"introduced":"0.14.1-rc1"},{"last_affected":"0.14.1-rc1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc1:*:*:*:*:*:*"},{"range":[{"introduced":"0.14.1-rc2"},{"last_affected":"0.14.1-rc2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc2:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:-:*:*:*:*:*:*","range":[{"introduced":"0.14.2-NA"},{"last_affected":"0.14.2-NA"}],"source":"CPE_STRING"},{"range":[{"introduced":"0.14.2-rc1"},{"last_affected":"0.14.2-rc1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc1:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc2:*:*:*:*:*:*","range":[{"introduced":"0.14.2-rc2"},{"last_affected":"0.14.2-rc2"}]},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.14.3:*:*:*:*:*:*:*","range":[{"introduced":"0.14.3"},{"last_affected":"0.14.3"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:-:*:*:*:*:*:*","range":[{"introduced":"0.15.0-NA"},{"last_affected":"0.15.0-NA"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc1:*:*:*:*:*:*","range":[{"introduced":"0.15.0-rc1"},{"last_affected":"0.15.0-rc1"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc2:*:*:*:*:*:*","range":[{"introduced":"0.15.0-rc2"},{"last_affected":"0.15.0-rc2"}]},{"range":[{"introduced":"0.15.0-rc3"},{"last_affected":"0.15.0-rc3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc3:*:*:*:*:*:*"},{"range":[{"introduced":"0.15.0.1"},{"last_affected":"0.15.0.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.15.0.1:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:-:*:*:*:*:*:*","range":[{"introduced":"0.15.1-NA"},{"last_affected":"0.15.1-NA"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:rc1:*:*:*:*:*:*","range":[{"introduced":"0.15.1-rc1"},{"last_affected":"0.15.1-rc1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.15.2:*:*:*:*:*:*:*","range":[{"introduced":"0.15.2"},{"last_affected":"0.15.2"}]},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:-:*:*:*:*:*:*","range":[{"introduced":"0.16.0-NA"},{"last_affected":"0.16.0-NA"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc1:*:*:*:*:*:*","range":[{"introduced":"0.16.0-rc1"},{"last_affected":"0.16.0-rc1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc2:*:*:*:*:*:*","range":[{"introduced":"0.16.0-rc2"},{"last_affected":"0.16.0-rc2"}]},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc3:*:*:*:*:*:*","range":[{"introduced":"0.16.0-rc3"},{"last_affected":"0.16.0-rc3"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc4:*:*:*:*:*:*","range":[{"introduced":"0.16.0-rc4"},{"last_affected":"0.16.0-rc4"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:-:*:*:*:*:*:*","range":[{"introduced":"0.16.1-NA"},{"last_affected":"0.16.1-NA"}]},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc1:*:*:*:*:*:*","range":[{"introduced":"0.16.1-rc1"},{"last_affected":"0.16.1-rc1"}],"source":"CPE_STRING"},{"range":[{"introduced":"0.16.1-rc2"},{"last_affected":"0.16.1-rc2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc2:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:-:*:*:*:*:*:*","range":[{"introduced":"0.16.2-NA"},{"last_affected":"0.16.2-NA"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc1:*:*:*:*:*:*","range":[{"introduced":"0.16.2-rc1"},{"last_affected":"0.16.2-rc1"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc2:*:*:*:*:*:*","range":[{"introduced":"0.16.2-rc2"},{"last_affected":"0.16.2-rc2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.16.3:*:*:*:*:*:*:*","range":[{"introduced":"0.16.3"},{"last_affected":"0.16.3"}]},{"cpe":"cpe:2.3:a:bitcoin:bitcoin_core:0.17.0:-:*:*:*:*:*:*","range":[{"introduced":"0.17.0-NA"},{"last_affected":"0.17.0-NA"}],"source":"CPE_STRING"}]}}],"versions":["0.12.0-rc1","0.12.0-rc2","0.12.0-rc3","0.12.0-rc4","0.12.0-rc5","0.12.1-NA","0.12.1-rc1","0.12.1-rc2","0.13","0.13.0-NA","0.13.0-rc1","0.13.0-rc2","0.13.0-rc3","0.13.1-NA","0.13.1-rc1","0.13.1-rc2","0.13.1-rc3","0.13.2-NA","0.13.2-rc1","0.14.0-NA","0.14.0-rc1","0.14.0-rc2","0.14.0-rc3","0.14.1-NA","0.14.1-rc1","0.14.1-rc2","0.14.2-NA","0.14.2-rc1","0.14.2-rc2","0.14.3","0.15.0-NA","0.15.0-rc1","0.15.0-rc2","0.15.0-rc3","0.15.0.1","0.15.1-NA","0.15.1-rc1","0.15.2","0.16.0-NA","0.16.0-rc1","0.16.0-rc2","0.16.0-rc3","0.16.0-rc4","0.16.1-NA","0.16.1-rc1","0.16.1-rc2","0.16.2-NA","0.16.2-rc1","0.16.2-rc2","0.16.3","0.17.0-NA"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20586.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}