Back to Database
Status published
Medium
CVE-2013-4165
The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information...
Vulnerability Description
The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4165
Credits & Attribution
No credits recorded in the NVD database.
References
More from bitcoin
View All →CVE-2021-3401
Bitcoin Core before 0.19.0 might allow remote attackers to execute...
Critical
9.8
CVE-2021-3195
bitcoind in Bitcoin Core through 0.21.0 can create a new...
High
7.5
CVE-2021-31876
Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the...
Medium
6.5
CVE-2020-14198
Bitcoin Core 0.20.0 allows remote denial of service....
High
7.5
CVE-2019-25220
Bitcoin Core before 24.0.1 allows remote attackers to cause a...
Unknown
0
Affected Vendor
bitcoin
View all reports →Affected Software
bitcoin core
Vulnerable Versions:
0.8.1
Timeline
Official Publish:
August 1st, 2013
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.