Vulnerability Details CVE-2015-6964
MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers. (Attackers cannot realistically steal these fees for themselves.) This occurs because there is no message authentication code (MAC).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.5%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2015-6964
-
cpe:2.3:a:multibit:multibit_hd:-
-
cpe:2.3:a:multibit:multibit_hd:0.0.3
-
cpe:2.3:a:multibit:multibit_hd:0.0.7
-
cpe:2.3:a:multibit:multibit_hd:0.0.8
-
cpe:2.3:a:multibit:multibit_hd:0.1.0
-
cpe:2.3:a:multibit:multibit_hd:0.1.1