CVE-2021-3195 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-3195 Interim 1 12 2025-08-14T01:19:29Z current 2021-05-30T14:46:36Z 2025-08-14T01:19:29Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-3195 bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZQOIWU7XODRDIITDKWB45QLM5US3ATJW/ E-Mail link for openSUSE-SU-2022:0072-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Package Hub 15 SP3 openSUSE Leap 15.3 openSUSE Tumbleweed bitcoin-qt5-0.21.1-2.2 bitcoin-qt5-0.21.2-bp153.2.3.1 bitcoin-test-0.21.1-2.2 bitcoin-test-0.21.2-bp153.2.3.1 bitcoin-utils-0.21.1-2.2 bitcoin-utils-0.21.2-bp153.2.3.1 bitcoind-0.21.1-2.2 bitcoind-0.21.2-bp153.2.3.1 libbitcoinconsensus-devel-0.21.1-2.2 libbitcoinconsensus-devel-0.21.2-bp153.2.3.1 libbitcoinconsensus0-0.21.1-2.2 libbitcoinconsensus0-0.21.2-bp153.2.3.1 bitcoin-qt5-0.21.2-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 bitcoin-test-0.21.2-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 bitcoin-utils-0.21.2-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 bitcoind-0.21.2-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 libbitcoinconsensus-devel-0.21.2-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 libbitcoinconsensus0-0.21.2-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 bitcoin-qt5-0.21.2-bp153.2.3.1 as a component of openSUSE Leap 15.3 bitcoin-test-0.21.2-bp153.2.3.1 as a component of openSUSE Leap 15.3 bitcoin-utils-0.21.2-bp153.2.3.1 as a component of openSUSE Leap 15.3 bitcoind-0.21.2-bp153.2.3.1 as a component of openSUSE Leap 15.3 libbitcoinconsensus-devel-0.21.2-bp153.2.3.1 as a component of openSUSE Leap 15.3 libbitcoinconsensus0-0.21.2-bp153.2.3.1 as a component of openSUSE Leap 15.3 bitcoin-qt5-0.21.1-2.2 as a component of openSUSE Tumbleweed bitcoin-test-0.21.1-2.2 as a component of openSUSE Tumbleweed bitcoin-utils-0.21.1-2.2 as a component of openSUSE Tumbleweed bitcoind-0.21.1-2.2 as a component of openSUSE Tumbleweed libbitcoinconsensus-devel-0.21.1-2.2 as a component of openSUSE Tumbleweed libbitcoinconsensus0-0.21.1-2.2 as a component of openSUSE Tumbleweed bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions CVE-2021-3195 SUSE Package Hub 15 SP3:bitcoin-qt5-0.21.2-bp153.2.3.1 SUSE Package Hub 15 SP3:bitcoin-test-0.21.2-bp153.2.3.1 SUSE Package Hub 15 SP3:bitcoin-utils-0.21.2-bp153.2.3.1 SUSE Package Hub 15 SP3:bitcoind-0.21.2-bp153.2.3.1 SUSE Package Hub 15 SP3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1 SUSE Package Hub 15 SP3:libbitcoinconsensus0-0.21.2-bp153.2.3.1 openSUSE Leap 15.3:bitcoin-qt5-0.21.2-bp153.2.3.1 openSUSE Leap 15.3:bitcoin-test-0.21.2-bp153.2.3.1 openSUSE Leap 15.3:bitcoin-utils-0.21.2-bp153.2.3.1 openSUSE Leap 15.3:bitcoind-0.21.2-bp153.2.3.1 openSUSE Leap 15.3:libbitcoinconsensus-devel-0.21.2-bp153.2.3.1 openSUSE Leap 15.3:libbitcoinconsensus0-0.21.2-bp153.2.3.1 openSUSE Tumbleweed:bitcoin-qt5-0.21.1-2.2 openSUSE Tumbleweed:bitcoin-test-0.21.1-2.2 openSUSE Tumbleweed:bitcoin-utils-0.21.1-2.2 openSUSE Tumbleweed:bitcoind-0.21.1-2.2 openSUSE Tumbleweed:libbitcoinconsensus-devel-0.21.1-2.2 openSUSE Tumbleweed:libbitcoinconsensus0-0.21.1-2.2 important 5 AV:N/AC:L/Au:N/C:N/I:P/A:N 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N