Vulnerability Details CVE-2018-19151
qtum through 0.16 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
- https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806
- http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
- https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806
Products affected by CVE-2018-19151
-
cpe:2.3:a:qtum:qtum:0.14.11
-
cpe:2.3:a:qtum:qtum:0.14.12
-
cpe:2.3:a:qtum:qtum:0.14.13
-
cpe:2.3:a:qtum:qtum:0.14.14
-
cpe:2.3:a:qtum:qtum:0.14.15
-
cpe:2.3:a:qtum:qtum:0.14.16
-
cpe:2.3:a:qtum:qtum:0.14.17
-
cpe:2.3:a:qtum:qtum:0.15.1
-
cpe:2.3:a:qtum:qtum:0.15.2
-
cpe:2.3:a:qtum:qtum:0.15.3