{"id":"CVE-2018-20586","details":"bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.","modified":"2026-07-08T19:45:20.497477Z","published":"2020-03-12T21:15:12.623Z","references":[{"type":"EVIDENCE","url":"https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bitcoin/bitcoin","events":[{"introduced":"3d5cf698d60eaa22ede6937207a205aede4212ff"},{"last_affected":"e1ed37edaedc85b8c3468bd9a726046344036243"}],"database_specific":{"cpe":["cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc3:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc4:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc5:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13:*:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc3:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc3:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc3:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.14.3:*:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc3:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.15.0.1:*:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.15.2:*:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc3:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc4:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:-:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.16.3:*:*:*:*:*:*:*","cpe:2.3:a:bitcoin:bitcoin_core:0.17.0:-:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0.12.0-rc1"},{"last_affected":"0.12.0-rc1"},{"introduced":"0.12.0-rc2"},{"last_affected":"0.12.0-rc2"},{"introduced":"0.12.0-rc3"},{"last_affected":"0.12.0-rc3"},{"introduced":"0.12.0-rc4"},{"last_affected":"0.12.0-rc4"},{"introduced":"0.12.0-rc5"},{"last_affected":"0.12.0-rc5"},{"introduced":"0.12.1-NA"},{"last_affected":"0.12.1-NA"},{"introduced":"0.12.1-rc1"},{"last_affected":"0.12.1-rc1"},{"introduced":"0.12.1-rc2"},{"last_affected":"0.12.1-rc2"},{"introduced":"0.13"},{"last_affected":"0.13"},{"introduced":"0.13.0-NA"},{"last_affected":"0.13.0-NA"},{"introduced":"0.13.0-rc1"},{"last_affected":"0.13.0-rc1"},{"introduced":"0.13.0-rc2"},{"last_affected":"0.13.0-rc2"},{"introduced":"0.13.0-rc3"},{"last_affected":"0.13.0-rc3"},{"introduced":"0.13.1-NA"},{"last_affected":"0.13.1-NA"},{"introduced":"0.13.1-rc1"},{"last_affected":"0.13.1-rc1"},{"introduced":"0.13.1-rc2"},{"last_affected":"0.13.1-rc2"},{"introduced":"0.13.1-rc3"},{"last_affected":"0.13.1-rc3"},{"introduced":"0.13.2-NA"},{"last_affected":"0.13.2-NA"},{"introduced":"0.13.2-rc1"},{"last_affected":"0.13.2-rc1"},{"introduced":"0.14.0-NA"},{"last_affected":"0.14.0-NA"},{"introduced":"0.14.0-rc1"},{"last_affected":"0.14.0-rc1"},{"introduced":"0.14.0-rc2"},{"last_affected":"0.14.0-rc2"},{"introduced":"0.14.0-rc3"},{"last_affected":"0.14.0-rc3"},{"introduced":"0.14.1-NA"},{"last_affected":"0.14.1-NA"},{"introduced":"0.14.1-rc1"},{"last_affected":"0.14.1-rc1"},{"introduced":"0.14.1-rc2"},{"last_affected":"0.14.1-rc2"},{"introduced":"0.14.2-NA"},{"last_affected":"0.14.2-NA"},{"introduced":"0.14.2-rc1"},{"last_affected":"0.14.2-rc1"},{"introduced":"0.14.2-rc2"},{"last_affected":"0.14.2-rc2"},{"introduced":"0.14.3"},{"last_affected":"0.14.3"},{"introduced":"0.15.0-NA"},{"last_affected":"0.15.0-NA"},{"introduced":"0.15.0-rc1"},{"last_affected":"0.15.0-rc1"},{"introduced":"0.15.0-rc2"},{"last_affected":"0.15.0-rc2"},{"introduced":"0.15.0-rc3"},{"last_affected":"0.15.0-rc3"},{"introduced":"0.15.0.1"},{"last_affected":"0.15.0.1"},{"introduced":"0.15.1-NA"},{"last_affected":"0.15.1-NA"},{"introduced":"0.15.1-rc1"},{"last_affected":"0.15.1-rc1"},{"introduced":"0.15.2"},{"last_affected":"0.15.2"},{"introduced":"0.16.0-NA"},{"last_affected":"0.16.0-NA"},{"introduced":"0.16.0-rc1"},{"last_affected":"0.16.0-rc1"},{"introduced":"0.16.0-rc2"},{"last_affected":"0.16.0-rc2"},{"introduced":"0.16.0-rc3"},{"last_affected":"0.16.0-rc3"},{"introduced":"0.16.0-rc4"},{"last_affected":"0.16.0-rc4"},{"introduced":"0.16.1-NA"},{"last_affected":"0.16.1-NA"},{"introduced":"0.16.1-rc1"},{"last_affected":"0.16.1-rc1"},{"introduced":"0.16.1-rc2"},{"last_affected":"0.16.1-rc2"},{"introduced":"0.16.2-NA"},{"last_affected":"0.16.2-NA"},{"introduced":"0.16.2-rc1"},{"last_affected":"0.16.2-rc1"},{"introduced":"0.16.2-rc2"},{"last_affected":"0.16.2-rc2"},{"introduced":"0.16.3"},{"last_affected":"0.16.3"},{"introduced":"0.17.0-NA"},{"last_affected":"0.17.0-NA"}],"source":"CPE_STRING"}}],"versions":["0.12.0-rc1","0.12.0-rc2","0.12.0-rc3","0.12.0-rc4","0.12.0-rc5","0.12.1-NA","0.12.1-rc1","0.12.1-rc2","0.13","0.13.0-NA","0.13.0-rc1","0.13.0-rc2","0.13.0-rc3","0.13.1-NA","0.13.1-rc1","0.13.1-rc2","0.13.1-rc3","0.13.2-NA","0.13.2-rc1","0.14.0-NA","0.14.0-rc1","0.14.0-rc2","0.14.0-rc3","0.14.1-NA","0.14.1-rc1","0.14.1-rc2","0.14.2-NA","0.14.2-rc1","0.14.2-rc2","0.14.3","0.15.0-NA","0.15.0-rc1","0.15.0-rc2","0.15.0-rc3","0.15.0.1","0.15.1-NA","0.15.1-rc1","0.15.2","0.16.0-NA","0.16.0-rc1","0.16.0-rc2","0.16.0-rc3","0.16.0-rc4","0.16.1-NA","0.16.1-rc1","0.16.1-rc2","0.16.2-NA","0.16.2-rc1","0.16.2-rc2","0.16.3","0.17.0-NA"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20586.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}