CVE-2018-17145: Bitcoin Inventory Out-of-Memory Denial-of-Service Attack



Summary:

In mid-2018, an uncontrolled memory resource consumption denial-of-service vulnerability was discovered in the peer-to-peer network code of three implementations of Bitcoin and several alternative chains. The vulnerability was easily exploitable and could result in a denial-of-service attack. Braydon Fuller has shared a paper and website for CVE-2018-17145 to provide more details about the vulnerability. The website, invdos.net, contains information on the vulnerability, while the paper, available at invdos.net/paper/CVE-2018-17145.pdf, provides a detailed explanation of the issue.


Updated on: 2023-05-20T23:51:19.235785+00:00