Lucene search

[email protected]NVD:CVE-2021-41593

HistoryOct 04, 2021 - 5:15 p.m.

CVE-2021-41593

2021-10-0417:15:08

CWE-770

[email protected]

web.nvd.nist.gov

lightning labs

lnd

vulnerability

dust

htlc

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

EPSS

0.002

Percentile

60.5%

JSON

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.

Affected configurations

Nvd

Node

lightning_network_daemon_projectlightning_network_daemonRange<0.11.0

lightning_network_daemon_projectlightning_network_daemonMatch0.11.0-

lightning_network_daemon_projectlightning_network_daemonMatch0.11.0beta

lightning_network_daemon_projectlightning_network_daemonMatch0.11.0beta_rc1

lightning_network_daemon_projectlightning_network_daemonMatch0.11.0beta_rc2

lightning_network_daemon_projectlightning_network_daemonMatch0.11.0beta_rc3

lightning_network_daemon_projectlightning_network_daemonMatch0.11.0beta_rc4

lightning_network_daemon_projectlightning_network_daemonMatch0.11.1beta

lightning_network_daemon_projectlightning_network_daemonMatch0.11.1beta_rc1

lightning_network_daemon_projectlightning_network_daemonMatch0.11.1beta_rc2

lightning_network_daemon_projectlightning_network_daemonMatch0.11.1beta_rc3

lightning_network_daemon_projectlightning_network_daemonMatch0.11.1beta_rc4

lightning_network_daemon_projectlightning_network_daemonMatch0.11.1beta_rc5

lightning_network_daemon_projectlightning_network_daemonMatch0.12.0beta

lightning_network_daemon_projectlightning_network_daemonMatch0.12.0beta_rc1

lightning_network_daemon_projectlightning_network_daemonMatch0.12.0beta_rc2

lightning_network_daemon_projectlightning_network_daemonMatch0.12.0beta_rc3

lightning_network_daemon_projectlightning_network_daemonMatch0.12.0beta_rc4

lightning_network_daemon_projectlightning_network_daemonMatch0.12.0beta_rc5

lightning_network_daemon_projectlightning_network_daemonMatch0.12.0beta_rc6

lightning_network_daemon_projectlightning_network_daemonMatch0.12.1beta

lightning_network_daemon_projectlightning_network_daemonMatch0.12.1beta_rc1

lightning_network_daemon_projectlightning_network_daemonMatch0.12.1beta_rc2

lightning_network_daemon_projectlightning_network_daemonMatch0.12.1beta_rc3

lightning_network_daemon_projectlightning_network_daemonMatch0.12.1beta_rc4

lightning_network_daemon_projectlightning_network_daemonMatch0.12.1beta_rc5

lightning_network_daemon_projectlightning_network_daemonMatch0.12.1beta_rc6

lightning_network_daemon_projectlightning_network_daemonMatch0.13.0beta

lightning_network_daemon_projectlightning_network_daemonMatch0.13.0beta_rc1

lightning_network_daemon_projectlightning_network_daemonMatch0.13.0beta_rc2

lightning_network_daemon_projectlightning_network_daemonMatch0.13.0beta_rc3

lightning_network_daemon_projectlightning_network_daemonMatch0.13.0beta_rc4

lightning_network_daemon_projectlightning_network_daemonMatch0.13.0beta_rc5

lightning_network_daemon_projectlightning_network_daemonMatch0.13.1beta

lightning_network_daemon_projectlightning_network_daemonMatch0.13.1beta_rc1

lightning_network_daemon_projectlightning_network_daemonMatch0.13.1beta_rc2

lightning_network_daemon_projectlightning_network_daemonMatch0.13.2beta

lightning_network_daemon_projectlightning_network_daemonMatch0.13.3beta_rc2

VendorProductVersionCPE
lightning_network_daemon_projectlightning_network_daemon*cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:*:*:*:*:*:*:*:*
lightning_network_daemon_projectlightning_network_daemon0.11.0cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:-:*:*:*:*:*:*
lightning_network_daemon_projectlightning_network_daemon0.11.0cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta:*:*:*:*:*:*
lightning_network_daemon_projectlightning_network_daemon0.11.0cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc1:*:*:*:*:*:*
lightning_network_daemon_projectlightning_network_daemon0.11.0cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc2:*:*:*:*:*:*
lightning_network_daemon_projectlightning_network_daemon0.11.0cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc3:*:*:*:*:*:*
lightning_network_daemon_projectlightning_network_daemon0.11.0cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc4:*:*:*:*:*:*
lightning_network_daemon_projectlightning_network_daemon0.11.1cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta:*:*:*:*:*:*
lightning_network_daemon_projectlightning_network_daemon0.11.1cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc1:*:*:*:*:*:*
lightning_network_daemon_projectlightning_network_daemon0.11.1cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc2:*:*:*:*:*:*

Vendor	Product	Version	CPE
lightning_network_daemon_project	lightning_network_daemon	*	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon::::::::
lightning_network_daemon_project	lightning_network_daemon	0.11.0	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:-::::::
lightning_network_daemon_project	lightning_network_daemon	0.11.0	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta::::::
lightning_network_daemon_project	lightning_network_daemon	0.11.0	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc1::::::
lightning_network_daemon_project	lightning_network_daemon	0.11.0	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc2::::::
lightning_network_daemon_project	lightning_network_daemon	0.11.0	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc3::::::
lightning_network_daemon_project	lightning_network_daemon	0.11.0	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc4::::::
lightning_network_daemon_project	lightning_network_daemon	0.11.1	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta::::::
lightning_network_daemon_project	lightning_network_daemon	0.11.1	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc1::::::
lightning_network_daemon_project	lightning_network_daemon	0.11.1	cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc2::::::

Rows per page:

1-10 of 381

References

bitcoinmagazine.com/technical/good-griefing-a-lingering-vulnerability-on-lightning-network-that-still-needs-fixing

github.com/lightningnetwork/lnd/blob/master/docs/release-notes/release-notes-0.13.3.md

github.com/lightningnetwork/lnd/releases/tag/v0.13.3-beta

lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.html

lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003257.html

lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003264.html

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

EPSS

0.002

Percentile

60.5%

JSON

Related for NVD:CVE-2021-41593

cve1 prion1 cvelist1