Author

Topic: CVE-2012-3789 disclosure (Read 876 times)

legendary
Activity: 2576
Merit: 1186
January 08, 2013, 04:25:18 PM
#2
(*) Version information in https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures has been frozen for a couple of months, and I have not other source, so I'm extrapolating growth.
The deployment links should all be up to date; anyone is welcome to update the wiki percentages as needed. I've updated them now: the CVE in question has 83% fix deployment.
hero member
Activity: 555
Merit: 654
January 08, 2013, 01:10:03 PM
#1
Given that update ratio from 0.6.2 to 0.6.3+ has probably passed the 80% (*) barrier for a long time, I decided to publish the full CVE-2012-3789 vulnerability report, since that is my obligation with the community.

https://en.bitcoin.it/wiki/CVE-2012-3789

I encourage those who are working in the Satoshi client to peer review the report. Also I suggest to people working on alternate clients or derived versions to read the report and see if the attacks apply to other implementations.

Best regards, Sergio.

(*) Version information in https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures has been frozen for a couple of months, and I have not other source, so I'm extrapolating growth.
Jump to: