Skip to content
Heist/ feed
Back to feed
Medium

Security advisory

Type: advisorySources: OSVCVE: CVE-2017-18350

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2017-18350
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 05:35 UTC · Revision 1

Source evidence

CVE-2017-18350

core-osv · Original source

Published 12 Mar 2020, 21:15 UTC

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.

osv:CVE-2017-18350
Complete source record
{
  "id": "3afa4011e227fde4d4a9540f491dc68003ecf1dadbe7736f4e28eff1847a5cf3",
  "url": "https://osv.dev/vulnerability/CVE-2017-18350",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2017-18350",
    "summary": "bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.",
    "evidence": "osv:CVE-2017-18350",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2017-18350",
      "aliases": [
        "CVE-2017-18350"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/bitcoin/bitcoin",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "7b57bc998f334775b50ebc8ca5e78ca728db4c58"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.15.1"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v0.15.1rc1",
            "v0.15.0.1",
            "v0.15.0",
            "v0.15.0rc1",
            "v0.15.0rc3",
            "v0.15.0rc2",
            "v0.9.0rc2",
            "noversion",
            "v0.8.0",
            "v0.9.0rc1",
            "v0.8.2",
            "v0.7.1rc1",
            "v0.7.1",
            "v0.8.2rc2",
            "v0.8.2rc3",
            "v0.8.2rc1",
            "v0.8.0rc1",
            "v0.7.0rc3",
            "v0.7.0",
            "v0.7.0rc2",
            "v0.7.0rc1",
            "v0.6.0rc6",
            "v0.6.0",
            "v0.6.1",
            "v0.5.0rc7",
            "v0.5.0",
            "v0.6.1rc2",
            "v0.6.1rc1",
            "v0.6.0rc5",
            "v0.6.0rc4",
            "v0.6.0rc3",
            "v0.4.0",
            "v0.6.0rc2",
            "v0.6.0rc1",
            "v0.5.1rc2",
            "v0.5.1",
            "v0.5.1rc1",
            "v0.5.0rc6",
            "v0.5.0rc5",
            "v0.5.0rc4",
            "v0.5.0rc2",
            "v0.5.0rc1",
            "v0.4.00rc2",
            "v0.4.00rc1",
            "v0.3.24",
            "v0.3.24rc3",
            "v0.3.24rc2",
            "v0.3.24rc1",
            "v0.3.23rc1",
            "v0.3.23",
            "v0.3.22",
            "v0.3.22rc3",
            "v0.3.22rc4",
            "v0.3.22rc2",
            "v0.3.22rc1",
            "v0.3.21",
            "v0.3.21rc",
            "v0.3.20.2_closest",
            "v0.3.20.01_closest",
            "v0.3.20",
            "v0.3.11_notexact",
            "v0.3.8",
            "v0.3.7",
            "v0.3.6",
            "v0.3.3",
            "v0.3.2",
            "v0.3.1",
            "v0.3.1rc1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18350.json"
          }
        }
      ],
      "modified": "2026-10-24T10:30:30.787827336Z",
      "provider": "osv",
      "references": [
        "https://medium.com/%40lukedashjr/cve-2017-18350-disclosure-fe6d695f45d5",
        "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2017-18350",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 432664,
  "published_at": "2020-03-12T21:15:12.373+00:00"
}