The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O consumption) via a Bitcoin transaction with many inputs corresponding to many different parts of the stored block chain.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bitcoin-qt | Bitcoin | 0.4-rc4 (including) | 0.4-rc4 (including) |
| Bitcoin-qt | Bitcoin | 0.4.8-rc4 (including) | 0.4.8-rc4 (including) |
| Bitcoin-qt | Bitcoin | 0.5.0-rc1 (including) | 0.5.0-rc1 (including) |
| Bitcoin-qt | Bitcoin | 0.5.0.4 (including) | 0.5.0.4 (including) |
| Bitcoin-qt | Bitcoin | 0.5.1-rc1 (including) | 0.5.1-rc1 (including) |
| Bitcoin-qt | Bitcoin | 0.5.3.0 (including) | 0.5.3.0 (including) |
| Bitcoin-qt | Bitcoin | 0.5.7 (including) | 0.5.7 (including) |
| Bitcoin-qt | Bitcoin | 0.6.0.10-rc4 (including) | 0.6.0.10-rc4 (including) |
| Bitcoin-qt | Bitcoin | 0.6.3 (including) | 0.6.3 (including) |
| Bitcoin-qt | Bitcoin | 0.7.0-rc1 (including) | 0.7.0-rc1 (including) |
| Bitcoin-qt | Bitcoin | 0.7.1 (including) | 0.7.1 (including) |
| Bitcoin_core | Bitcoin | * | * |
| Bitcoin_core | Bitcoin | * | 0.7.2 (including) |
| Bitcoin_core | Bitcoin | 0.3.4 (including) | 0.3.4 (including) |
| Bitcoin_core | Bitcoin | 0.3.5 (including) | 0.3.5 (including) |
| Bitcoin_core | Bitcoin | 0.3.8 (including) | 0.3.8 (including) |
| Bitcoin_core | Bitcoin | 0.3.10 (including) | 0.3.10 (including) |
| Bitcoin_core | Bitcoin | 0.3.11 (including) | 0.3.11 (including) |
| Bitcoin_core | Bitcoin | 0.3.12 (including) | 0.3.12 (including) |
| Bitcoin_core | Bitcoin | 0.4.0 (including) | 0.4.0 (including) |
| Bitcoin_core | Bitcoin | 0.4.1 (including) | 0.4.1 (including) |
| Bitcoin_core | Bitcoin | 0.4.1-rc6 (including) | 0.4.1-rc6 (including) |
| Bitcoin_core | Bitcoin | 0.4.2 (including) | 0.4.2 (including) |
| Bitcoin_core | Bitcoin | 0.4.3 (including) | 0.4.3 (including) |
| Bitcoin_core | Bitcoin | 0.4.4 (including) | 0.4.4 (including) |
| Bitcoin_core | Bitcoin | 0.4.4-rc2 (including) | 0.4.4-rc2 (including) |
| Bitcoin_core | Bitcoin | 0.4.5 (including) | 0.4.5 (including) |
| Bitcoin_core | Bitcoin | 0.4.6 (including) | 0.4.6 (including) |
| Bitcoin_core | Bitcoin | 0.4.7-rc2 (including) | 0.4.7-rc2 (including) |
| Bitcoin_core | Bitcoin | 0.5.0-rc (including) | 0.5.0-rc (including) |
| Bitcoin_core | Bitcoin | 0.5.3 (including) | 0.5.3 (including) |
| Bitcoin_core | Bitcoin | 0.5.3.1 (including) | 0.5.3.1 (including) |
| Bitcoin_core | Bitcoin | 0.5.4 (including) | 0.5.4 (including) |
| Bitcoin_core | Bitcoin | 0.5.5 (including) | 0.5.5 (including) |
| Bitcoin_core | Bitcoin | 0.5.6-rc2 (including) | 0.5.6-rc2 (including) |
| Bitcoin_core | Bitcoin | 0.6.0.1 (including) | 0.6.0.1 (including) |
| Bitcoin_core | Bitcoin | 0.6.0.2 (including) | 0.6.0.2 (including) |
| Bitcoin_core | Bitcoin | 0.6.0.3 (including) | 0.6.0.3 (including) |
| Bitcoin_core | Bitcoin | 0.6.0.4 (including) | 0.6.0.4 (including) |
| Bitcoin_core | Bitcoin | 0.6.0.5 (including) | 0.6.0.5 (including) |
| Bitcoin_core | Bitcoin | 0.6.0.6 (including) | 0.6.0.6 (including) |
| Bitcoin_core | Bitcoin | 0.6.0.7 (including) | 0.6.0.7 (including) |
| Bitcoin_core | Bitcoin | 0.6.0.8 (including) | 0.6.0.8 (including) |
| Bitcoin_core | Bitcoin | 0.6.1 (including) | 0.6.1 (including) |
| Bitcoin_core | Bitcoin | 0.6.2 (including) | 0.6.2 (including) |
| Bitcoind | Bitcoin | 0.4.4-rc4 (including) | 0.4.4-rc4 (including) |
| Bitcoind | Bitcoin | 0.5.7 (including) | 0.5.7 (including) |
| Bitcoind | Bitcoin | 0.6.0.0 (including) | 0.6.0.0 (including) |
| Bitcoind | Bitcoin | 0.6.0.10-rc4 (including) | 0.6.0.10-rc4 (including) |
| Bitcoind | Bitcoin | 0.6.3 (including) | 0.6.3 (including) |
| Bitcoind | Bitcoin | 0.6.4-rc4 (including) | 0.6.4-rc4 (including) |
| Bitcoind | Bitcoin | 0.7.0-rc1 (including) | 0.7.0-rc1 (including) |
| Bitcoind | Bitcoin | 0.7.1 (including) | 0.7.1 (including) |