CVE-2024-55563

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55563
Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC (Hashed Timelock Contract) can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel transactions.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://ariard.github.io Third Party Advisory
https://bitcoincore.org Product
https://delvingbitcoin.org/t/full-disclosure-transaction-relay-throughput-overflow-attacks-against-off-chain-protocols/1305 Issue Tracking
https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures Third Party Advisory
https://gnusha.org/pi/bitcoindev/CALZpt+EptER=p+P7VN3QAb9n=dODA9_LnR9xZwWpRsdAwedv=w@mail.gmail.com/T/#u Mailing List
Configurations

Configuration 1 (hide)

cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*
History

22 May 2025, 16:56

Type Values Removed Values Added
References () https://ariard.github.io - () https://ariard.github.io - Third Party Advisory
References () https://bitcoincore.org - () https://bitcoincore.org - Product
References () https://delvingbitcoin.org/t/full-disclosure-transaction-relay-throughput-overflow-attacks-against-off-chain-protocols/1305 - () https://delvingbitcoin.org/t/full-disclosure-transaction-relay-throughput-overflow-attacks-against-off-chain-protocols/1305 - Issue Tracking
References () https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - () https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - Third Party Advisory
References () https://gnusha.org/pi/bitcoindev/CALZpt+EptER=p+P7VN3QAb9n=dODA9_LnR9xZwWpRsdAwedv=w@mail.gmail.com/T/#u - () https://gnusha.org/pi/bitcoindev/CALZpt+EptER=p+P7VN3QAb9n=dODA9_LnR9xZwWpRsdAwedv=w@mail.gmail.com/T/#u - Mailing List
CPE cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*
First Time Bitcoin bitcoin Core
Bitcoin

04 Mar 2025, 22:15

Type Values Removed Values Added
Summary
  • (es) Bitcoin Core hasta la versión 27.2 permite el bloqueo de la retransmisión de transacciones mediante un ataque de protocolo fuera de la cadena, un problema relacionado con CVE-2024-52913. Por ejemplo, el resultado de un HTLC (contrato de bloqueo de tiempo hash) puede modificarse porque una inundación de tráfico de transacciones impide la propagación de ciertas transacciones del canal Lightning.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3
CWE CWE-770

09 Dec 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-09 01:15

Updated : 2025-05-22 16:56

NVD link : CVE-2024-55563

Mitre link : CVE-2024-55563

CVE.ORG link : CVE-2024-55563

JSON object : View

Products Affected

bitcoin

  • bitcoin_core
CWE
CWE-770

Allocation of Resources Without Limits or Throttling