github.com/lightningnetwork/lnd

4 results · Feed

• Medium 6.5
  CVE-2024-38359

  Lightning Network Daemon Onion Bomb

  The Lightning Network Daemon (lnd) - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users sho…

  lightningnetwork lnd github.com/lightningnetwork/lnd Go
  Jun 20, 2024
• High 8.2
  CVE-2022-39389

  Witness Block Parsing DoS Vulnerability in lnd

  Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version `v0.15.4` are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded st…

  lightningnetwork lnd github.com/lightningnetwork/lnd Go
  Nov 17, 2022
• Critical 9.8
  CVE-2022-44797

  btcd mishandles witness size checking

  btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

  github.com/lightningnetwork/lnd github.com/btcsuite/btcd golang-github-btcsuite-btcd-btcec Ubuntu Go
  Nov 7, 2022
• High 7.5
  CVE-2019-12999 Public exploit

  Improper Access Control in Lightning Network Daemon

  Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control.

  github.com/lightningnetwork/lnd Go
  Jan 31, 2020