Btcd Security Update Advisory (CVE-2024-38365)
Overview
An update has been released to address vulnerabilities in btcd. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-38365
- btcd versions: ~ 0.24.2 (excluded)
Resolved Vulnerabilities
An error in the reimplementation of the FindAndDelete() function in the btcd Bitcoin client could allow a chain-splitting or denial-of-service attack (CVE-2024-38365)
Vulnerability Patches
The following product-specific Vulnerability Patches have been made available in the latest update. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-38365
- btcd version: 0.24.2
References
[1] CVE-2024-38365 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-38365
[2] OP_CODESEPARATOR fuzzy match
https://github.com/btcsuite/btcd/security/advisories/GHSA-27vh-h6mc-q6g8
[3] btcd/v0.24.2