# CVE-2024-34478: GO-2024-2818 - Consensus failures in github.com/btcsuite/btcd

Source: https://junglewise.ai/threats/cve-2024-34478-btcd-susceptible-to-consensus-failures  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-05-08  
License: CC BY 4.0 with a link back

CVE-2024-34478 · Severity: info · Published 2024-05-08

Consensus failures in github.com/btcsuite/btcd

Technologies: [github.com/btcsuite/btcd (Go)](https://junglewise.ai/threats/technologies/github-com-btcsuite-btcd). Vendors: [Go](https://junglewise.ai/threats/vendors/go).

## Quick answers

**Is CVE-2024-34478 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-34478 being exploited in the wild.

**How severe is CVE-2024-34478?** Informational severity, published 8 May 2024.

**Which products and versions are affected?** github.com/btcsuite/btcd (Go) SEMVER:introduced=0,fixed=0.24.0.

**Is there a fix for CVE-2024-34478?** Yes. github.com/btcsuite/btcd (Go): upgrade to 0.24.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected by CVE-2024-34478?** Check whether you run github.com/btcsuite/btcd (Go) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- github.com/btcsuite/btcd (Go): upgrade to 0.24.0 or later

  ```sh
  go get github.com/btcsuite/btcd@v0.24.0
  ```


## Affected products

- github.com/btcsuite/btcd (Go) SEMVER:introduced=0,fixed=0.24.0

## Identifiers

- CVE-2024-34478
- GHSA-3jgf-r68h-xfqm
- GO-2024-2818

## Related threats

- [GO-2024-3189 - Consensus failure in github.com/btcsuite/btcd](https://junglewise.ai/threats/cve-2024-38365-btcd-did-not-correctly-re-implement-bitcoin-core-s-findanddelete)
- [GO-2022-1098 - Denial of service in message decoding in github.com/btcsuite/btcd](https://junglewise.ai/threats/cve-2022-44797-btcd-mishandles-witness-size-checking)