{"id":"GHSA-hx3r-jv9q-85jw","summary":"Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)","details":"There was an easily exploitable uncontrolled memory resource consumption denial-of-service vulnerability that existed in the peer-to-peer network code of three implementations of Bitcoin and several alternative chains.\n\nFor more details please see:\nhttps://invdos.net/\n\nFor the paper:\nhttps://invdos.net/paper/CVE-2018-17145.pdf","aliases":["CVE-2018-17145"],"modified":"2023-11-08T04:00:03.039349Z","published":"2020-09-10T19:44:58Z","database_specific":{"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2020-09-10T19:44:16Z","nvd_published_at":null,"cwe_ids":["CWE-400"]},"references":[{"type":"WEB","url":"https://github.com/bcoin-org/bcoin/security/advisories/GHSA-hx3r-jv9q-85jw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17145"},{"type":"WEB","url":"https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-17145"},{"type":"PACKAGE","url":"https://github.com/bcoin-org/bcoin"},{"type":"WEB","url":"https://github.com/bitcoin/bitcoin/blob/v0.16.2/doc/release-notes.md"},{"type":"WEB","url":"https://invdos.net"},{"type":"WEB","url":"https://invdos.net/paper/CVE-2018-17145.pdf"}],"affected":[{"package":{"name":"bcoin","ecosystem":"npm","purl":"pkg:npm/bcoin"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-hx3r-jv9q-85jw/GHSA-hx3r-jv9q-85jw.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}