GitHub Advisoryadvisory · Go

GHSA-3jgf-r68h-xfqm btcd susceptible to consensus failures

MEDIUM Published 2024-05-05 Modified 2024-08-07 Official page ↗
Aliases
CVE-2024-34478
Ecosystem
Go
Packages
github.com/btcsuite/btcd
Severity
Moderate
Weaknesses
CWE-436
Reviewed
2024-05-06

Affected packages

• Go github.com/btcsuite/btcd: < 0.24.0 → fixed in 0.24.0

Description

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds.

Related

Alias · CVE (1)

  • CVE-2024-34478 btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus… vulnerability

Weakness · CWE (1)

  • CWE-436 Interpretation Conflict weakness

References