GitHub Advisory DatabaseGHSA-2CHG-86HQ-7W38btcd mishandles witness size checking
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
58.6%
btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.
Specific Go Packages Affected
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/btcsuite/btcd | lt | 0.23.2 | |
| github.com/lightningnetwork/lnd | lt | 0.15.2-beta |
References
github.com/advisories/GHSA-2chg-86hq-7w38
github.com/btcsuite/btcd/commit/7fdaf6958781df46fffee4bc8bee38801c066da8
github.com/btcsuite/btcd/pull/1896
github.com/btcsuite/btcd/releases/tag/v0.23.2
github.com/lightningnetwork/lnd/issues/7002
github.com/lightningnetwork/lnd/releases/tag/v0.15.2-beta
nvd.nist.gov/vuln/detail/CVE-2022-44797
pkg.go.dev/vuln/GO-2022-1098
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
58.6%