CVE-2021-3195

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-319507.6Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-319517.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-319527.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2021-319537.8Windows Filter Manager Elevation of Privilege VulnerabilityCVE-2021-319547.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2021-319555.5Windows Kernel Information Disclosure VulnerabilityCVE-2021-319567.8Windows NTFS Elevation of Privilege VulnerabilityCVE-2021-319575.9ASP.NET Core Denial of Service VulnerabilityCVE-2021-319587.5Windows NTLM Elevation of Privilege VulnerabilityCVE-2021-319596.4Scripting Engine Memory Corruption VulnerabilityCVE-2021-31968.8An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federatedCVE-2021-319605.5Windows Bind Filter Driver Information Disclosure Vulnerability
CVE-2021-3195: High severity, CVSS 7.5 | Vulnix