TI-2022-18763 CVE-2022-39389 · GHSA-hc82-w9v8-83pr
Witness Block Parsing DoS Vulnerability in lnd
Priority HIGH 75
Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node.
No Lightning Network Daemon Project vulnerabilities are listed in CISA KEV.
4 records in Lightning Network Daemon · all components
Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node.
Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.
Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database.
Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions.