未評価
bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an...
CVE-2017-18350
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.
参照URL
- advisory en.bitcoin.it
- web medium.com