CVE-2022-44797

2022-11-0704:15:09

mitre

web.nvd.nist.gov

cve-2022-44797

btcd

lightning labs lnd

bitcoin

security vulnerability

witness size checking

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

58.6%

JSON

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

Affected configurations

Nvd

Node

lightning_network_daemon_projectlightning_network_daemonRange<0.15.2

AND

btcd_projectbtcdRange<0.23.2

VendorProductVersionCPE
lightning_network_daemon_projectlightning_network_daemon*cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:*:*:*:*:*:*:*:*
btcd_projectbtcd*cpe:2.3:a:btcd_project:btcd:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lightning_network_daemon_project	lightning_network_daemon	*	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon::::::::
btcd_project	btcd	*	cpe:2.3:a:btcd_project:btcd::::::::