Developers disclose vulnerabilities in Bitcoin Core v25.0, urging node operators to update software to fix them
On October 13th, Bitcoin developers have again revealed details of a serious software vulnerability. According to senior Core developers, more than 13% of the world's home and business computers that enforce Bitcoin's rules are vulnerable to remote shutdown.
The vulnerability, named CVE-2024-35202, affects Bitcoin nodes running Core software versions prior to 25.0. Nodes that are not updated to at least 25.0 allow attackers to remotely exploit assertions in the software logic that processes block transaction ('blocktxn') messages. It is worth noting that the vulnerability has little financial benefit to regular attackers.