VULNERABILITY INTELLIGENCE

CVE-2015-6964

CVSS score5.3 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2023-09-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers. (Attackers cannot realistically steal these fees for themselves.) This occurs because there is no message authentication code (MAC).

Weakness classification

  • CWE-697: Incorrect Comparison

Primary references