CVE-2013-2293

CVE-2013-2293 describes a denial-of-service vulnerability in bitcoind and Bitcoin-Qt versions prior to 0.8.0rc1. The flaw lies in the CTransaction::FetchInputs method, which can be exploited by remote attackers to consume excessive disk I/O. This is achieved by crafting a Bitcoin transaction with numerous inputs referencing disparate parts of the blockchain, forcing the system to inefficiently load data from disk. The vulnerability has a CVSS score of 5.0 (medium severity) due to its network-based attack vector, low attack complexity, and potential for partial availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.