to leave a comment.
Photo: AI-generated image
A vulnerability that could lead to continuous memory usage increase in the software that verifies transactions on the Bitcoin (BTC) network has been fixed. Bitcoin Core is open-source software that provides full node functionality, directly verifying transactions and blocks, along with wallet features.
According to a security advisory released by the Bitcoin Core development team on October 28, both memory exhaustion vulnerabilities were classified as 'medium' severity. The fixes have been applied to versions 29.5, 30.4, 31.2, and 32.1. The impacts noted in the advisory are increased memory usage by nodes and potential operational disruptions.
One vulnerability affects nodes running on Windows, macOS, and BSD. During the process of handling data sent by external peers, memory usage can increase without limit, potentially causing the node to stop. Linux is not affected by this vulnerability.
Another vulnerability involves messages continuously accumulating in the send queue for connections where message transmission has been temporarily paused. The development team explained that memory usage could steadily increase when connections using older communication methods remain active and are not disconnected. Nodes configured to only relay blocks and not propagate transactions are much less affected by this issue.
Both issues were discovered during an automated large language model (LLM)-based inspection performed by Spiral's Project Loupe, and Gregory Sanders verified the results and communicated them to the development team. Separately, the 32.1 version documentation states that support for the 29 series and older versions has ended, and they will no longer receive updates.
*Disclaimer: This article is for investment reference only, and we are not responsible for any investment losses incurred based on it. The content should be interpreted for informational purposes only.*
Newsletter
Get key news delivered to your email every morning
to leave a comment.