CVE-2019-15947 Information disclosure in n/a

High 7.5 Published 5 Sep 2019 Updated 5 Aug 2024

An attacker can recover private keys from unencrypted memory dumps if a user mishandles core files generated after a Bitcoin Core crash.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2019-15947?

CVE-2019-15947 is a high-severity vulnerability in Bitcoin Bitcoin Core, published on 5 Sep 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command.

Weakness: CWE-312

Which versions are affected by CVE-2019-15947?

It affects 1 product.

Products include Bitcoin Bitcoin Core.

How do I fix CVE-2019-15947?

Upgrade to a fixed version.

Is CVE-2019-15947 being exploited?

There is no known exploitation of CVE-2019-15947 in the wild and no public exploit code.

All Bitcoin Bitcoin Core vulnerabilities

Sources

Also known as GHSA-g4g7-v7q6-4xw8.