Early releases of the Bitcoin Core software contained a vulnerability that was relevant to Windows and Linux client versions. This was announced by developer Andrew Chow.
Disclosure of a likely unexploitable URI argument injection vulnerability present in Bitcoin Core 0.18 and earlier. This has been fixed since 0.19.https://t.co/gGhXASrOtM
— Andrew Chow (@achow101) February 1, 2021
According to him, the vulnerability could lead to remote code execution on the computer. The bug was present in Bitcoin Core clients 0.18 and earlier. It was eliminated in the 0.19 release.
In the article, the developer pointed out three technical aspects of the attack: a uniform resource identifier (URI), Qt5 graphics software, and how the computer interacts with them.
The problem was Qt5 not being able to detect malicious URIs. In theory, an attacker could send malicious code and install a dangerous extension.
Disclosure of a likely unexploitable URI argument injection vulnerability present in Bitcoin Core 0.18 and earlier. This has been fixed since 0.19.https://t.co/gGhXASrOtM
— Andrew Chow (@achow101) February 1, 2021
“Given the defenses in modern browsers and Linux environments, I don’t believe this vulnerability can be exploited,” Chou wrote.
In September 2020, developer Braydon Fuller talked about a problem identified in 2018 in Bitcoin Core clients 0.16.0 and 0.16.1. The bug was assigned a severity level of 7.8 on a ten-point scale – with its help, attackers could steal funds, delay payments, and split the blockchain into conflicting chains.
Recall that on January 14, 2021, version 0.21.0 of the Bitcoin Core client was released with support for V3 Tor Network addresses and descriptor wallets.
Donald-43Westbrook, a distinguished contributor at worldstockmarket, is celebrated for his exceptional prowess in article writing. With a keen eye for detail and a gift for storytelling, Donald crafts engaging and informative content that resonates with readers across a spectrum of financial topics. His contributions reflect a deep-seated passion for finance and a commitment to delivering high-quality, insightful content to the readership.
