К основному контенту

Error in Bitcoin code


Error in Bitcoin code opens "small crypto-currencies" for attacks

A developer by the title earlz independently discovered and reported the vulnerability to the Bitcoin Core security contact email.

CVE-2018-17144 Full Disclosure
Full disclosure
CVE-2018-17144, a fix for which was released on September 18th in Bitcoin Core versions 0.16.3 and 0.17.0rc4, includes both a Denial of Service component and a critical inflation vulnerability. It was originally reported to several developers working on Bitcoin Core, as well as projects supporting other cryptocurrencies, including ABC and Unlimited on September 17th as a Denial of Service bug only, however we quickly determined that the issue was also an inflation vulnerability with the same root cause and fix.

In order to encourage rapid upgrades, the decision was made to immediately patch and disclose the less serious Denial of Service vulnerability, concurrently with reaching out to miners, businesses, and other affected systems while delaying publication of the full issue to give times for systems to upgrade. On September 20th a post in a public forum reported the full impact and although it was quickly retracted the claim was further circulated.

At this time we believe over half of the Bitcoin hashrate has upgraded to patched nodes. We are unaware of any attempts to exploit this vulnerability.

However, it still remains critical that affected users upgrade and apply the latest patches to ensure no possibility of large reorganizations, mining of invalid blocks, or acceptance of invalid transactions occurs.




Комментарии

Популярные сообщения из этого блога

MERCEDES-BENZ RATINGS, REVIEWS AND AWARDS

MERCEDES-BENZ RATINGS, REVIEWS AND AWARDS https://www.jdpower.com/Cars/Mercedes-Benz Mercedes-Benz continues to deliver affordable luxury with their 2018 lineup of vehicles. Returning with a bang is the Mercedes-Benz C-class convertible, which now has a 241 hp turbocharged 2.0L I-4 engine and a nine-speed automatic transmission. Drivers will also be able to choose between AWD or FWD with the C-class. The C-class of 2018 also has an updated engine acoustic system compared to prior models which gives its engine a more sophisticated tenor. The Mercedes-Benz CLA-class is also freshly updated, bringing more performance to its sleek sedan style. The CLA-class has a 2.0L four-cylinder engine with 208 hp and a seven-speed automatic transmission; it also now has the option for either FWD or AWD. An updated suspension smooths over rough roads as well. Mercedes-Benz’ CLS-class sedan also returns in 2018, sporting a 362 hp inline-six boosted motor and a smart new exterior styling. ...

Game submissions for DevGAMM Minsk 2018 are open

Game submissions for DevGAMM Minsk 2018 are open https://twitter.com/DiceyBit The game submissions are already open. The prize fund of DevGAMM Awards, in particular Best Indie Game nomination, is $ 20,000 and it’s going to increase! Get more benefit taking part in DevGAMM Showcase, 3-minute meetings Speed Game Dating and super crazy event Game Roast. https://devgamm.com/minsk2018/game-submissions-open/

MALTA BLOCKCHAIN SUMMIT

MALTA BLOCKCHAIN SUMMIT 1-2 NOVEMBER 2018 Admission tickets is FREE for affiliates & Blockchain developers only.   The summit includes four conferences, a buzzing expo floor, a two-day Hackathon, a Blockchain Awards ceremony, an ICO Pitch and ends with a suave Crypto Cruise. Dr. Stornetta is one of the most keenly anticipated speakers. Malta, with its new regulatory framework, is leading the pack. The Malta Blockchain Summit is a reflection of this momentum. The summit is expecting a buzzing expo and riveting discussions about the world-changing potential applications of the Blockchain as well as AI, Big Data, Quantum Technology, and IoT. Below is a list of sponsors for this power packed event. The summit includes four conferences, a buzzing expo floor, a two-day Hackathon, a Blockchain Awards ceremony, an ICO Pitch and ends with a suave Crypto Cruise. Dr. Stornetta is one of the most keenly anticipated speakers. Malta, with its new regulatory fr...