Bitcoin Core discloses TCP out-of-memory vulnerability
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Bitcoin Core has disclosed a Medium-severity flaw affecting nodes on Windows, macOS, and BSD, where a malicious peer sending TCP urgent (out-of-band) data can bypass the per-peer read backpressure and force unbounded memory growth, crashing the node. Linux nodes are unaffected. Fixes ship in versions 29.5, 30.4, 31.2, and 32.1.