CVE-2018-1000851

CRITICO 9.8CVE-2018-1000851 · Published 20/12/2018 · updated 17/06/2026

In breve

CVE-2018-1000851 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda copay bitcoin wallet (copay).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 84.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
copay bitcoin wallet copay	`≥ 5.0.1, ≤ 5.1.0`	No fix yet

Description

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability appears to have been fixed in 5.2.0 and later .

References

arstechnica.com/information-technology/2018/11/hacker-backdoors-widely-used-open-source-software-to-steal-bitcoin · Third Party Advisory
blog.bitpay.com/npm-package-vulnerability-copay · Third Party Advisory
bitpay/copay · Exploit
dominictarr/event-stream · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free