vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-17145

HIGH
7.5
CVSS Score
Published: September 10, 2020 at 04:32 PM UTC
Updated: June 17, 2026 at 01:45 AM UTC
7 products affected across 7 vendorsBitcoin CoreBtcdBitcoinknots

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 5%

Description

Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Bcoin· Bcoin
95%
v < 1.0.2
Affected range stops below 1.0.2, so it looks safe — our inference, not a vendor statement
Bitcoin Core· Bitcoin
95%
0.16.0 ≤ v < 0.16.2
Affected range stops below 0.16.2, so it looks safe — our inference, not a vendor statement
Bitcoinknots· Bitcoinknots
95%
0.16.0 ≤ v < 0.16.2
Affected range stops below 0.16.2, so it looks safe — our inference, not a vendor statement
Btcd· Btcd Project
95%
0.10.0 beta0.11.0 beta0.11.1 beta0.12.0 beta0.13.0 beta0.13.0 beta20.20.0 beta0.20.1 beta0.3.0 alpha0.3.1 alpha0.3.2 alpha0.3.3 alpha0.4.0 alpha0.5.0 alpha0.6.0 alpha0.7.0 alpha0.8.0 beta0.9.0 beta
Dcrd· Decred
95%
v < 1.5.2
Affected range stops below 1.5.2, so it looks safe — our inference, not a vendor statement
Litecoin· Litecoin
95%
0.16.0 ≤ v < 0.16.2
Affected range stops below 0.16.2, so it looks safe — our inference, not a vendor statement
Namecoin Core· Namecoin
95%
0.16.0 ≤ v < 0.16.2
Affected range stops below 0.16.2, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (4)

x_refsource_MISCVendor Advisory
Source: [email protected]
https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-17145
x_refsource_MISCRelease NotesThird Party Advisory
Source: [email protected]
https://github.com/bitcoin/bitcoin/blob/v0.16.2/doc/release-notes.md
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://invdos.net
x_refsource_CONFIRMExploitTechnical DescriptionThird Party Advisory
Source: [email protected]
https://invdos.net/paper/CVE-2018-17145.pdf

CVSS

7.5HIGH[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-400

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card