CVE-2018-17144 PoC — Bitcoin Core和Bitcoin Knots 输入验证错误漏洞

Source

https://github.com/iioch/ban-exploitable-bitcoin-nodes

Associated Vulnerability

Title: Bitcoin Core和Bitcoin Knots 输入验证错误漏洞 (CVE-2018-17144)
Description:Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash.

Description

Ban all denial-of-service vulnerability exploitable nodes from your node CVE-2018-17144

Readme

# ban-exploitable-bitcoin-nodes
Ban all denial-of-service vulnerability exploitable nodes from your node CVE-2018-17144  

## Requirements for the bash script (ban.sh)

### Command-line JSON processor jq.

Install on Debian-based Linux
```` 
sudo apt-get install jq
```` 

## Download and use the script

`git clone https://github.com/iioch/ban-exploitable-bitcoin-nodes.git`

Run:

````
cd ban-exploitable-bitcoin-nodes   
chmod u+x ban.sh   
./ban.sh
````

### To view banned IP addresses:

````
bitcoin-cli listbanned
````

### To clear banned IP addresses:

````
bitcoin-cli clearbanned
````

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →