Bitcoin Core disclosed a medium-severity vulnerability that could let a connected malicious peer crash a node on Windows, macOS or BSD by exhausting its memory. Linux users are unaffected by this issue. Fixes were released in versions 29.5, 30.4, 31.2 and 32.1. The advisory, published October 28, explains that TCP urgent data could bypass a limit on queued data. The issue was identified through Project Loupe’s automated scan and validated before reaching the security team.
Related currencies / asset groups: BTC
Bitcoin Core says a connected malicious peer can crash a Windows, macOS or BSD node by sending TCP urgent data that causes unbounded memory growth; Linux users are unaffected by this issue.
Bitcoin CoreA fix was released in Bitcoin Core versions 29.5, 30.4, 31.2 and 32.1.
Bitcoin CoreLimitation: This issue affects the non-Linux socket monitoring backend; Linux users are not affected.
No BTCUSDT price data around this story yet.
No ideas are linked to this story yet.