CVE-2018-20586 (GCVE-0-2018-20586)
Vulnerability from cvelistv5 – Published: 2020-03-12 20:34 – Updated: 2024-08-05 12:05
VLAI
EPSS
VEX
Summary
bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.
Severity
5.3 (Medium)
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://en.bitcoin.it/wiki/Common_Vulnerabilities… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T12:05:17.590Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-03-12T20:34:08.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-20586",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586",
"refsource": "MISC",
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-20586",
"datePublished": "2020-03-12T20:34:08.000Z",
"dateReserved": "2018-12-30T00:00:00.000Z",
"dateUpdated": "2024-08-05T12:05:17.590Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2018-20586",
"date": "2026-09-20",
"epss": "0.01087",
"percentile": "0.63831"
},
"fkie_nvd": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "14CC1402-251D-441D-921F-E6D0933831D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "07B7FF50-0406-4648-B873-2F30D711889E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "4E04A666-9C60-4835-A97A-4354FDDB3A19",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc4:*:*:*:*:*:*",
"matchCriteriaId": "D0742D09-FAFF-4F84-87A8-372ABEE07B9E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc5:*:*:*:*:*:*",
"matchCriteriaId": "D920FDBD-18C5-4252-95C8-18342739F00E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:-:*:*:*:*:*:*",
"matchCriteriaId": "C1E3D81A-E732-4580-BD06-484BBB78F460",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "85F32470-AEE3-498E-99D1-AFCB88813D24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C3179A1E-0730-4120-BF67-8F1BA2F84DE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13:*:*:*:*:*:*:*",
"matchCriteriaId": "5E2A6D5F-6633-4A00-A0A0-FA75EF85F995",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:-:*:*:*:*:*:*",
"matchCriteriaId": "4EB034E6-2DEF-475B-A988-342CBE5E3C48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "FC725933-01E7-457C-ADA8-B61CB9D8B5B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "1C085D41-3632-4285-B951-6BB64625023D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "25743E75-EE87-4DFD-8DF5-A367602F2640",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:-:*:*:*:*:*:*",
"matchCriteriaId": "AD791670-C4F8-486E-A891-E49BAC240F9B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "F32CC982-950A-4EE7-AECC-972FBFB71606",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C30AEEE6-BB5A-4B85-90E8-7D9E3C71A9AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "16F7423D-02CD-4734-A598-784F448DFD76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:-:*:*:*:*:*:*",
"matchCriteriaId": "1834BD1D-59B2-471C-84C1-588A276B4087",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "D8B8D112-ADF2-4441-9C3B-0E8188F51540",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:-:*:*:*:*:*:*",
"matchCriteriaId": "120F19E5-E58D-4E40-8BA4-B0A6465FDC0E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "A4E12E54-BB09-472B-93A6-12A77AF854AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "4775D0C9-AB2E-459B-925F-B1832E2F142C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E5E1FAB0-FAB8-484C-B9F6-D85775DF2908",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:-:*:*:*:*:*:*",
"matchCriteriaId": "8E03BEFD-5E87-4704-9E42-6A6A3D56078E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "1790406B-3447-46A1-8E71-32BB31A6BA79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "2D8AE957-086A-4AE1-8C90-2263A5ADF175",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:-:*:*:*:*:*:*",
"matchCriteriaId": "7CC69D1A-A88C-4D7C-9583-705E6BD09309",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7D126937-7A31-4E1D-9CD7-5A2FB4FBCA99",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A5297725-6D47-4C73-BFA1-7332609CC90A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2AA05B76-AC3F-492E-8CF1-18F20ABF05BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:-:*:*:*:*:*:*",
"matchCriteriaId": "1559EDBE-5654-48A2-8DB2-DAE50AAC7D1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "5E4632E3-0D58-42EC-931C-4B8477694489",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "B199B1BC-6AA5-441A-A8D8-64B98CC6D52E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "952CE418-B490-487D-9893-0A3F4C30B992",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7AAFA18E-4DC6-4FCD-8459-C9E8D5177685",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:-:*:*:*:*:*:*",
"matchCriteriaId": "A727FB31-FD4F-4AA0-821B-8D1B4B653D14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0962E3AF-CD06-4DDF-B64E-F537F4646D87",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5DCF8D36-67BB-4C75-9EC5-688FED31085E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:-:*:*:*:*:*:*",
"matchCriteriaId": "E8516496-5BEF-4698-8D32-6C1C7AD0734C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0F20180A-B4E5-47EB-816D-50B1E1D85B44",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "15341D0B-9B8C-4DB5-90A2-F4CD938E9FC0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "EBE19710-731E-48BE-B4E3-77F851D670E4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc4:*:*:*:*:*:*",
"matchCriteriaId": "DA04CEED-B65D-4369-A03C-8AFBEDDBE4F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:-:*:*:*:*:*:*",
"matchCriteriaId": "1FCF76F3-2051-42BC-B742-6C631EBA1B84",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E760CF3A-4ABE-48C0-9219-699A3A524B8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "35A3299D-4AEC-4435-AC20-AB3ECB76E490",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:-:*:*:*:*:*:*",
"matchCriteriaId": "6FCFB843-B726-4FF4-ADC5-E78D16D8579E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "BC88FE65-B525-46D2-A4F4-02F5906744D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "170B7847-9A1A-42E2-9376-BCC4D6CE7279",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.3:*:*:*:*:*:*:*",
"matchCriteriaId": "EA98291E-418D-4184-887D-2BD3F4723503",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.17.0:-:*:*:*:*:*:*",
"matchCriteriaId": "0C9CB378-9964-46BC-A6B2-3678C29DA37A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call."
},
{
"lang": "es",
"value": "bitcoind y Bitcoin-Qt versiones anteriores a 0.17.1, permiten una inyecci\u00f3n de datos arbitrarios en el registro de depuraci\u00f3n por medio de una llamada RPC."
}
],
"id": "CVE-2018-20586",
"lastModified": "2024-11-21T04:01:47.390",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-03-12T21:15:12.623",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-116"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "14CC1402-251D-441D-921F-E6D0933831D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "07B7FF50-0406-4648-B873-2F30D711889E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "4E04A666-9C60-4835-A97A-4354FDDB3A19",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc4:*:*:*:*:*:*",
"matchCriteriaId": "D0742D09-FAFF-4F84-87A8-372ABEE07B9E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.0:rc5:*:*:*:*:*:*",
"matchCriteriaId": "D920FDBD-18C5-4252-95C8-18342739F00E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:-:*:*:*:*:*:*",
"matchCriteriaId": "C1E3D81A-E732-4580-BD06-484BBB78F460",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "85F32470-AEE3-498E-99D1-AFCB88813D24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.12.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C3179A1E-0730-4120-BF67-8F1BA2F84DE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13:*:*:*:*:*:*:*",
"matchCriteriaId": "5E2A6D5F-6633-4A00-A0A0-FA75EF85F995",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:-:*:*:*:*:*:*",
"matchCriteriaId": "4EB034E6-2DEF-475B-A988-342CBE5E3C48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "FC725933-01E7-457C-ADA8-B61CB9D8B5B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "1C085D41-3632-4285-B951-6BB64625023D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "25743E75-EE87-4DFD-8DF5-A367602F2640",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:-:*:*:*:*:*:*",
"matchCriteriaId": "AD791670-C4F8-486E-A891-E49BAC240F9B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "F32CC982-950A-4EE7-AECC-972FBFB71606",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C30AEEE6-BB5A-4B85-90E8-7D9E3C71A9AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "16F7423D-02CD-4734-A598-784F448DFD76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:-:*:*:*:*:*:*",
"matchCriteriaId": "1834BD1D-59B2-471C-84C1-588A276B4087",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.13.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "D8B8D112-ADF2-4441-9C3B-0E8188F51540",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:-:*:*:*:*:*:*",
"matchCriteriaId": "120F19E5-E58D-4E40-8BA4-B0A6465FDC0E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "A4E12E54-BB09-472B-93A6-12A77AF854AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "4775D0C9-AB2E-459B-925F-B1832E2F142C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E5E1FAB0-FAB8-484C-B9F6-D85775DF2908",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:-:*:*:*:*:*:*",
"matchCriteriaId": "8E03BEFD-5E87-4704-9E42-6A6A3D56078E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "1790406B-3447-46A1-8E71-32BB31A6BA79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "2D8AE957-086A-4AE1-8C90-2263A5ADF175",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:-:*:*:*:*:*:*",
"matchCriteriaId": "7CC69D1A-A88C-4D7C-9583-705E6BD09309",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7D126937-7A31-4E1D-9CD7-5A2FB4FBCA99",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A5297725-6D47-4C73-BFA1-7332609CC90A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.14.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2AA05B76-AC3F-492E-8CF1-18F20ABF05BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:-:*:*:*:*:*:*",
"matchCriteriaId": "1559EDBE-5654-48A2-8DB2-DAE50AAC7D1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "5E4632E3-0D58-42EC-931C-4B8477694489",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "B199B1BC-6AA5-441A-A8D8-64B98CC6D52E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "952CE418-B490-487D-9893-0A3F4C30B992",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7AAFA18E-4DC6-4FCD-8459-C9E8D5177685",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:-:*:*:*:*:*:*",
"matchCriteriaId": "A727FB31-FD4F-4AA0-821B-8D1B4B653D14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0962E3AF-CD06-4DDF-B64E-F537F4646D87",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.15.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5DCF8D36-67BB-4C75-9EC5-688FED31085E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:-:*:*:*:*:*:*",
"matchCriteriaId": "E8516496-5BEF-4698-8D32-6C1C7AD0734C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0F20180A-B4E5-47EB-816D-50B1E1D85B44",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "15341D0B-9B8C-4DB5-90A2-F4CD938E9FC0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "EBE19710-731E-48BE-B4E3-77F851D670E4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.0:rc4:*:*:*:*:*:*",
"matchCriteriaId": "DA04CEED-B65D-4369-A03C-8AFBEDDBE4F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:-:*:*:*:*:*:*",
"matchCriteriaId": "1FCF76F3-2051-42BC-B742-6C631EBA1B84",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E760CF3A-4ABE-48C0-9219-699A3A524B8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "35A3299D-4AEC-4435-AC20-AB3ECB76E490",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:-:*:*:*:*:*:*",
"matchCriteriaId": "6FCFB843-B726-4FF4-ADC5-E78D16D8579E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "BC88FE65-B525-46D2-A4F4-02F5906744D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "170B7847-9A1A-42E2-9376-BCC4D6CE7279",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.16.3:*:*:*:*:*:*:*",
"matchCriteriaId": "EA98291E-418D-4184-887D-2BD3F4723503",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitcoin:bitcoin_core:0.17.0:-:*:*:*:*:*:*",
"matchCriteriaId": "0C9CB378-9964-46BC-A6B2-3678C29DA37A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call."
},
{
"lang": "es",
"value": "bitcoind y Bitcoin-Qt versiones anteriores a 0.17.1, permiten una inyecci\u00f3n de datos arbitrarios en el registro de depuraci\u00f3n por medio de una llamada RPC."
}
],
"id": "CVE-2018-20586",
"lastModified": "2024-11-21T04:01:47.390",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-03-12T21:15:12.623",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-116"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…