CVE:CVE-2013-3220
CNNVD:CNNVD-201308-019
Bitcoin（比特币）是Bitcoin基金会的一种用开源的P2P软件开发的电子货币、数字货币，是一种网络虚拟货币。bitcoind、Bitcoin-Qt和wxBitcoin都是比特币客户端。
bitcoind和Bitcoin-Qt，wxBitcoin中存在漏洞，该漏洞源于程序没有考虑块的大小可能需要更多的数据库锁。远程攻击者可通过大的块触发不正确的Berkeley DB锁利用该漏洞造成拒绝服务，并启用double-spending能力。以下版本中存在漏洞：bitcoind和Bitcoin-Qt 0.4.9:rc1及之前的版本，0.5.1至0.5.8rc1版本，0.6.0至0.6.5:rc1版本，0.7.0:rc1至0.7.3:rc1版本。
solution:Upgrade bitcoin bitcoin-qt to a higher version than *:rc1,0.4:rc4,0.4.8:rc4,0.5.0:rc1,0.5.0.4,0.5.1:rc1,0.5.3.0,0.5.7,0.5.8:rc1,0.6.0.10:rc4,0.6.3,0.7.0:rc1,0.7.1,0.7.2,0.7.3:rc1,and avoid the version *:rc1,0.4:rc4,0.4.8:rc4,0.5.0:rc1,0.5.0.4,0.5.1:rc1,0.5.3.0,0.5.7,0.5.8:rc1,0.6.0.10:rc4,0.6.3,0.7.0:rc1,0.7.1,0.7.2,0.7.3:rc1; Upgrade bitcoin bitcoin_core to a higher version than *,0.3.4,0.3.5,0.3.8,0.3.10,0.3.11,0.3.12,0.4.0,0.4.1,0.4.1:rc6,0.4.2,0.4.3,0.4.4,0.4.4:rc2,0.4.5,0.4.6,0.4.7:rc2,0.5.0:rc,0.5.3,0.5.3.1,0.5.4,0.5.5,0.5.6:rc2,0.6.0.1,0.6.0.2,0.6.0.3,0.6.0.4,0.6.0.5,0.6.0.6,0.6.0.7,0.6.0.8,0.6.1,0.6.2,and avoid the version 0.3.4,0.3.5,0.3.8,0.3.10,0.3.11,0.3.12,0.4.0,0.4.1,0.4.1:rc6,0.4.2,0.4.3,0.4.4,0.4.4:rc2,0.4.5,0.4.6,0.4.7:rc2,0.5.0:rc,0.5.3,0.5.3.1,0.5.4,0.5.5,0.5.6:rc2,0.6.0.1,0.6.0.2,0.6.0.3,0.6.0.4,0.6.0.5,0.6.0.6,0.6.0.7,0.6.0.8,0.6.1,0.6.2; Upgrade bitcoin bitcoind to a higher version than *:rc1,0.4.4:rc4,0.5.7,0.5.8:rc1,0.6.0.0,0.6.0.10:rc4,0.6.3,0.6.4:rc4,0.6.5:rc1,0.7.0:rc1,0.7.1,0.7.2,0.7.3:rc1,and avoid the version *:rc1,0.4.4:rc4,0.5.7,0.5.8:rc1,0.6.0.0,0.6.0.10:rc4,0.6.3,0.6.4:rc4,0.6.5:rc1,0.7.0:rc1,0.7.1,0.7.2,0.7.3:rc1; Upgrade bitcoin qitcoin-qt to a higher version than 0.6.4:rc4,0.6.5:rc1,and avoid the version 0.6.4:rc4,0.6.5:rc1