PatchTheCVEbitmessage vulnerabilities
Recent CVEs affecting bitmessage products. 2 tracked.
bitmessage has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-02-08. Highest priority: CVE-2018-1000070 (score 52/100).
- CVE-2021-26917 MEDIUM 5.5 UPGRADE PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via
- CVE-2018-1000070 HIGH 8.8 DOWNGRADE Bitmessage PyBitmessage version v0.6.2 (and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f
FAQ
How do I fix bitmessage vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bitmessage being exploited right now?
None of the tracked bitmessage CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bitmessage CVE should I patch first?
CVE-2018-1000070 currently ranks highest (52/100): Bitmessage PyBitmessage version v0.6.2 (and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f.