Unscored severity · published Aug 6, 2012
CVE-2011-4447
The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from Bitcoin wallet files by bypassing the BSDDB interface and reading entries that are marked for deletion.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BC
Bitcoin Core · Bitcoin
0.4.0; 0.4.1; 0.5.0 · source: NVD
WX
Wxbitcoin · Bitcoin
0.4.0; 0.4.1; 0.5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4447
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4447
bitcoin.org
http://bitcoin.org/releases/2011/11/21/v0.5.0.html
bitcointalk.org
https://bitcointalk.org/index.php?topic=51474.0
bitcointalk.org
https://bitcointalk.org/index.php?topic=51604.0
Vendor Advisory
https://en.bitcoin.it/wiki/CVEs
More from Bitcoin Core
9.8
CVE-2015-20111
miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a…
7.5
CVE-2025-46597
Bitcoin Core 0.13.0 through 29.x has an integer overflow
7.5
CVE-2025-54605
Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2)
7.5
CVE-2025-54604
Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2)
7.5
CVE-2024-52912
Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connecting peers) and an abs64 logic bug