rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-2218 
Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (libvirtd crash) via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list --inactive" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T21:00:00.000Z
CVE-2013-2219 
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T10:00:00.000Z
CVE-2013-2220 
Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T10:00:00.000Z
CVE-2013-2221 
Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-04T17:00:00.000Z
CVE-2013-2222 
Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ZRTP Hello packet to the (1) ZRtp::findBestSASType, (2) ZRtp::findBestAuthLen, (3) ZRtp::findBestCipher, (4) ZRtp::findBestHash, or (5) ZRtp::findBestPubKey functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-04T17:00:00.000Z
CVE-2013-2223 
GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) via a crafted packet, as demonstrated by a truncated Ping packet that is not properly handled by the getEpHash function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-04T17:00:00.000Z
CVE-2013-2224 
A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a denial of service (invalid free operation and system crash) or possibly gain privileges via a sendmsg system call with the IP_RETOPTS option, as demonstrated by hemlock.c.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-3552.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-04T21:00:00.000Z
CVE-2013-2225 
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-27T15:00:00.000Z
CVE-2013-2226 
Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) filename parameter to front/document.form.php, or (3) table parameter to ajax/comments.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-14T19:00:00.000Z
CVE-2013-2227 
GLPI 0.83.7 has Local File Inclusion in common.tabs.php.
Problem types: description: file inclusion
Affected products: vendor: INDEPNET Development Team
product: GLPI
Published: 2019-11-01T16:50:29.000Z
CVE-2013-2228 
SaltStack RSA Key Generation allows remote users to decrypt communications
Problem types: description: exponent of 1
Affected products: vendor: SaltStack
product: SaltStack
Published: 2019-12-03T13:55:48.000Z
CVE-2013-2230 
The qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via unspecified vectors involving "multiple events registration."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T21:00:00.000Z
CVE-2013-2231 
Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-01T17:00:00.000Z
CVE-2013-2232 
The ip6_sk_dst_check function in net/ipv6/ip6_output.c in the Linux kernel before 3.10 allows local users to cause a denial of service (system crash) by using an AF_INET6 socket for a connection to an IPv4 interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-04T21:00:00.000Z
CVE-2013-2233 
Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-04T20:00:00.000Z
CVE-2013-2234 
The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key_socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-04T21:00:00.000Z
CVE-2013-2236 
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-24T01:00:00.000Z
CVE-2013-2237 
The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify_policy interface of an IPSec key_socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-04T21:00:00.000Z
CVE-2013-2238 
Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T20:00:00.000Z
CVE-2013-2239 
vzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via (1) a crafted ploop driver ioctl call, related to the ploop_getdevice_ioc function in drivers/block/ploop/dev.c, or (2) a crafted quotactl system call, related to the compat_quotactl function in fs/quota/quota.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-12T01:00:00.000Z
CVE-2013-2240 
lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T00:00:00.000Z
CVE-2013-2241 
modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information (image files) via the "full" string in the size parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T00:00:00.000Z
CVE-2013-2242 
mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before authorizing daemon-mode chat, which allows remote authenticated users to bypass intended access restrictions via an HTTP session to a chat server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T22:00:00.000Z
CVE-2013-2243 
mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T22:00:00.000Z
CVE-2013-2244 
Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T22:00:00.000Z
CVE-2013-2245 
rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which allows remote authenticated users to obtain sensitive block information by reading an RSS feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T22:00:00.000Z
CVE-2013-2246 
mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/feedback:view capability before displaying recent feedback, which allows remote authenticated users to obtain sensitive information via a request for all course feedback that has occurred since a specified time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T22:00:00.000Z
CVE-2013-2247 
The Fast Permissions Administration module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to the modal content callback, which allows remote attackers to obtain unspecified access to the permissions edit form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-28T15:00:00.000Z
CVE-2013-2248 
Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T01:00:00.000Z
CVE-2013-2249 
mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-23T15:00:00.000Z
CVE-2013-2250 
Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters, related to nested expressions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-15T16:00:00.000Z
CVE-2013-2251 
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T01:00:00.000Z
CVE-2013-2254 
The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in Apache Sling does not properly handle a NULL value that returned when the session does not have permissions to the root node, which allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-17T23:00:00.000Z
CVE-2013-2255 
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.
Problem types: description: and non-validating HTTPS client
Affected products: vendor: OpenStack
product: Keystone
vendor: OpenStack
product: Compute
Published: 2019-11-01T18:38:01.000Z
CVE-2013-2256 
OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T19:00:00.000Z
CVE-2013-2257 
Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness
Problem types: description: Brute Force Weakness
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-04T16:41:52.000Z
CVE-2013-2258 
Cryptocat before 2.0.22 has Nickname User Impersonation
Problem types: description: User Impersonation Spoofing
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-04T16:35:11.000Z
CVE-2013-2259 
Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview
Problem types: description: Arbitrary Code Execution
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-04T16:32:03.000Z
CVE-2013-2260 
Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness
Problem types: description: Key Entropy Weakness
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-04T16:15:31.000Z
CVE-2013-2261 
Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure
Problem types: description: Software Detection Weakness
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T15:43:47.000Z
CVE-2013-2262 
Cryptocat strophe.js before 2.0.22 has information disclosure
Problem types: description: Activity Remote Disclosure
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-04T15:50:02.000Z
CVE-2013-2263 
Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resources via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-19T14:00:00.000Z
CVE-2013-2264 
The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits different behavior for invalid INVITE, SUBSCRIBE, and REGISTER transactions depending on whether the user account exists, which allows remote attackers to enumerate account names by (1) reading HTTP status codes, (2) reading additional text in a 403 (aka Forbidden) response, or (3) observing whether certain retransmissions occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-29T18:00:00.000Z
CVE-2013-2266 
libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-28T16:00:00.000Z
CVE-2013-2267 
PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T21:39:36.000Z
CVE-2013-2268 
Unspecified vulnerability in the MathML implementation in WebKit in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, has unknown impact and remote attack vectors, related to a "high severity security issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-23T21:00:00.000Z
CVE-2013-2269 
The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in conjunction with information from a "default holding page" to discover the link that is used for sponsor approval of the guest request, then performing a direct request to that link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-01T17:00:00.000Z
CVE-2013-2270 
Cross-site scripting (XSS) vulnerability in the administration page in Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-07T20:00:00.000Z
CVE-2013-2271 
The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-15T20:00:00.000Z
CVE-2013-2272 
The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet addresses and IP addresses via a series of large Bitcoin transactions with insufficient fees.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T10:00:00.000Z
CVE-2013-2273 
bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote attackers to obtain potentially sensitive information about returned change by leveraging certain predictability in the outputs of a Bitcoin transaction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T10:00:00.000Z
CVE-2013-2274 
Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-20T16:00:00.000Z
CVE-2013-2275 
The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-20T16:00:00.000Z
CVE-2013-2276 
The avcodec_decode_audio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted audio data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-27T16:00:00.000Z
CVE-2013-2277 
The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth and chroma depth, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted H.264 data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-27T16:00:00.000Z
CVE-2013-2278 
Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to log messages and the "internal log handler to the Windows Event log."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-01T00:00:00.000Z
CVE-2013-2279 
CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-21T17:00:00.000Z
CVE-2013-2287 
Multiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) notify or (2) blog parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-04T14:00:00.000Z
CVE-2013-2289 
Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-11T15:00:00.000Z
CVE-2013-2290 
Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless access points to inject arbitrary web script or HTML via a crafted SSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-28T23:00:00.000Z
CVE-2013-2292 
bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption) by mining a block to create a nonstandard Bitcoin transaction containing multiple OP_CHECKSIG script opcodes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T10:00:00.000Z
CVE-2013-2293 
The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O consumption) via a Bitcoin transaction with many inputs corresponding to many different parts of the stored block chain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T10:00:00.000Z