CVE-2010-5140: Bitcoin Core

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, which allows remote attackers to cause a denial of service (invalid-transaction flood) by sending low-valued transactions without transaction fees.

Affected products

• Bitcoin Bitcoin Core: up to and including 0.3.12; version 0.3.4 only; version 0.3.5 only; version 0.3.8 only; version 0.3.10 only; version 0.3.11 only
• Bitcoin Wxbitcoin: up to and including 0.3.12; version 0.3.4 only; version 0.3.5 only; version 0.3.8 only; version 0.3.10 only; version 0.3.11 only

Published 2012-08-06. Last modified 2026-06-16.