Vulnerability Details : CVE-2017-9230
The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multiple candidate root values ending with the same 4 bytes, and calculations involving sqrt numbers. This violates the security assumptions of (1) the choice of input, outside of the dedicated nonce area, fed into the Proof-of-Work function should not change its difficulty to evaluate and (2) every Proof-of-Work function execution should be independent. NOTE: a number of persons feel that this methodology is a benign mining optimization, not a vulnerability
Products affected by CVE-2017-9230
- cpe:2.3:a:bitcoin:bitcoin:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-9230
0.53%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 77 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-9230
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST | |
7.5
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
3.9
|
3.6
|
NIST | |
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
3.9
|
3.6
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2024-07-03 |
CWE ids for CVE-2017-9230
-
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2017-9230
-
https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014351.html
[bitcoin-dev] Treating ‘ASICBOOST’ as a Security VulnerabilityMailing List;Third Party Advisory
-
http://www.mit.edu/~jlrubin//public/pdfs/Asicboost.pdf
Technical Description
-
http://www.securityfocus.com/bid/98657
Bitcoin Proof-of-Work Algorithm CVE-2017-9230 Security WeaknessThird Party Advisory;VDB Entry
-
https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014352.html
[bitcoin-dev] Treating ‘ASICBOOST’ as a Security VulnerabilityMailing List;Third Party Advisory
-
https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-April/013996.html
[bitcoin-dev] BIP proposal: Inhibiting a covert attack on the Bitcoin POW functionMailing List;Technical Description;Third Party Advisory
-
https://arxiv.org/ftp/arxiv/papers/1604/1604.00575.pdf
Technical Description
-
https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014349.html
[bitcoin-dev] Treating ‘ASICBOOST’ as a Security VulnerabilityMailing List;Third Party Advisory
Jump to