Vulnerability Description
In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitcoin | Bitcoin Core | < 25.1 |
References
- https://bitcoincore.org/en/2024/11/05/cb-stall-hindering-propagation/Vendor Advisory
- https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_ExposuresThird Party Advisory
FAQ
What is CVE-2024-52922?
CVE-2024-52922 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-p...
How severe is CVE-2024-52922?
CVE-2024-52922 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-52922?
Check the references section above for vendor advisories and patch information. Affected products include: Bitcoin Bitcoin Core.