Search for packages
| purl | pkg:alpm/archlinux/bitcoin-daemon@22.0-1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-573d-byea-r7cg
Aliases: CVE-2021-3195 |
bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions | There are no reported fixed by versions. |
|
VCID-9g6t-dcaz-1kh3
Aliases: CVE-2021-31876 |
Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the replacement policy specified in BIP125, which makes it easier for attackers to trigger a loss of funds, or a denial of service attack against downstream projects such as Lightning network nodes. An unconfirmed child transaction with nSequence = 0xff_ff_ff_ff, spending an unconfirmed parent with nSequence <= 0xff_ff_ff_fd, should be replaceable because there is inherited signaling by the child transaction. However, the actual PreChecks implementation does not enforce this. Instead, mempool rejects the replacement attempt of the unconfirmed child transaction. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T18:26:23.379757+00:00 | Arch Linux Importer | Affected by | VCID-9g6t-dcaz-1kh3 | https://security.archlinux.org/AVG-1486 | 38.0.0 |
| 2026-04-01T18:26:23.362015+00:00 | Arch Linux Importer | Affected by | VCID-573d-byea-r7cg | https://security.archlinux.org/AVG-1486 | 38.0.0 |