CVE-2018-20586 Other in n/a
Attackers can inject arbitrary data into debug logs via RPC calls, potentially misleading administrators or corrupting log integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-20586?
CVE-2018-20586 is a medium-severity vulnerability in Bitcoin Bitcoin Core, published on 12 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.
Weakness: CWE-116
Which versions are affected by CVE-2018-20586?
It affects 1 product.
Products include Bitcoin Bitcoin Core.
How do I fix CVE-2018-20586?
No fix has been published for CVE-2018-20586 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-20586 being exploited?
There is no known exploitation of CVE-2018-20586 in the wild and no public exploit code.
Other vulnerabilities in Bitcoin Bitcoin Core
Sources
Also known as GHSA-r873-jvcv-fxhw.