CVE-2021-37491
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
07/02/2023
Last modified:
25/03/2025
Description
An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction() function.
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:dogecoin:dogecoin:*:*:*:*:*:*:*:* | 1.14.3 (including) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://dogecoin.com
- https://github.com/VPRLab/BlkVulnReport/blob/main/NDSS23_BlockScope.pdf
- https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3
- https://github.com/dogecoin/dogecoin/blob/master/src/wallet/wallet.cpp#L2628-L2640
- https://github.com/dogecoin/dogecoin/issues/2279
- http://dogecoin.com
- https://github.com/VPRLab/BlkVulnReport/blob/main/NDSS23_BlockScope.pdf
- https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3
- https://github.com/dogecoin/dogecoin/blob/master/src/wallet/wallet.cpp#L2628-L2640
- https://github.com/dogecoin/dogecoin/issues/2279



