CVE-2023-50428

Published Dec 9, 2023

Last updated 2 years ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2023-50428 is a data handling vulnerability affecting Bitcoin Core through version 26.0 and Bitcoin Knots before version 25.1.knots20231115. This flaw enables the circumvention of datacarrier size limits by disguising data as code, typically through the use of `OP_FALSE OP_IF` opcodes. This technique has been actively exploited in the wild by "Inscriptions" since 2022 and 2023. The vulnerability allows arbitrary data to be embedded in the Bitcoin blockchain beyond its intended limits, potentially leading to increased storage requirements and network resource consumption for node operators. While the Bitcoin Knots project considers this a security vulnerability, some within the broader Bitcoin community view it as "not a bug" and a legitimate use of the protocol.

Description: In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bitcoin Knots project, some others consider it "not a bug."
Source: cve@mitre.org
NVD status: Modified
CNA Tags: disputed

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.3
Impact score: 1.4
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Severity: MEDIUM

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B1179DE7-9710-433D-83B8-0CE1A7CC8BF7",
            "versionEndIncluding": "26.0",
            "versionStartIncluding": "0.9",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:bitcoinknots:bitcoin_knots:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "42AEEA35-5598-4E0A-B693-5D0918ED30B7",
            "versionEndExcluding": "25.1",
            "versionStartIncluding": "0.9",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.