CVE-2020-14198
Bitcoin Core 0.20.0 allows remote denial of service.
Bitcoin Core 0.20.0 allows remote denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Bitcoin Core 0.20.0 allows remote denial of service.
- Record
CVE-2020-14198- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Bitcoin Core 0.20.0 allows remote denial of service.
- Record
CVE-2020-14198- Updated
- 2026-11-02
EUVDEUVD-2020-6353 No score
Bitcoin Core 0.20.0 allows remote denial of service.
- Record
EUVD-2020-6353- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ccff-xq5j-5wrr
Bitcoin Core 0.20.0 allows remote denial of service.
Bitcoin Core 0.20.0 allows remote denial of service.
- Record
GHSA-ccff-xq5j-5wrr- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
Bitcoin Core 0.20.0 allows remote denial of service.
- Record
CVE-2020-14198- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0458 No score
Updated bitcoin packages fix security vulnerabilities
Multiple vulnerabilities have been discovered in Bitcoin.
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command (CVE-2019-15947).
Bitcoin Core 0.20.0 allows remote denial of service (CVE-2020-14198).
- Record
MGASA-2020-0458- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11073-1 No score
bitcoin-qt6-31.0-2.1 on GA media
These are all security issues fixed in the bitcoin-qt6-31.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11073-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21149-1 No score
Security update for bitcoin
This update for bitcoin fixes the following issues:
Changes in bitcoin:
- Reference the tracking bugs for CVEs already fixed in current bitcoin
(the affected versions all predate the shipped release):
- CVE-2018-20587 (boo#1125092)
- CVE-2019-15947 (boo#1149711)
- CVE-2020-14198 (boo#1181786)
- CVE-2021-3195 (boo#1181784)
- CVE-2023-37192 (boo#1217678)
- CVE-2024-35202 (boo#1231507)
- Record
openSUSE-SU-2026:21149-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bitcoinMageia:7 From an advisory covering 2 CVEs |
before 0.20.1-1.mga7 | 0.20.1-1.mga7 |
bitcoinopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 31.0-2.1 | 31.0-2.1 |
bitcoinopenSUSE:Leap 16.0 From an advisory covering 6 CVEs |
before 27.1-bp160.2.1 | 27.1-bp160.2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-14198 is a high vulnerability (CVSS 7.5) in Bitcoin Core, published September 10, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.09%, the 87th percentile. No source names a fixed version.
References
en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
github.com/bitcoin/bitcoin/commits/master
security.gentoo.org/glsa/202009-18
nvd.nist.gov/vuln/detail/CVE-2020-14198
advisories.mageia.org/MGASA-2020-0458.html
Show 13 moreShow less
bugs.mageia.org/show_bug.cgi?id=27731
suse.com/security/cve/CVE-2018-20587
bugzilla.suse.com/1125092