Back to Database
Status published
Unknown
CVE-2019-25220
Bitcoin Core before 24.0.1 allows remote attackers to cause a...
Vulnerability Description
Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25220
Credits & Attribution
No credits recorded in the NVD database.
References
More from bitcoin
View All →CVE-2021-3401
Bitcoin Core before 0.19.0 might allow remote attackers to execute...
Critical
9.8
CVE-2021-3195
bitcoind in Bitcoin Core through 0.21.0 can create a new...
High
7.5
CVE-2021-31876
Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the...
Medium
6.5
CVE-2020-14198
Bitcoin Core 0.20.0 allows remote denial of service....
High
7.5
CVE-2019-15947
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in...
High
7.5
Affected Vendor
bitcoin
View all reports →Affected Software
bitcoin core
Vulnerable Versions:
0
Timeline
Official Publish:
November 18th, 2024
Last Modified:
November 18th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.