CVE-2022-44797

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...

CVE-2022-44797

CVE-2022-44797 affects btcd before 0.23.2 (used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin products) due to mishandling of witness size checking, enabling high-impact network exploitation. The CVSSv3.1 base score is 9.8 (CRITICAL) with full confidentiality, integrity, and availabi...

btcd 安全漏洞

btcd is a Bitcoin in Go open source alternative node-wide Bitcoin implementation written in Go golang. A security vulnerability exists in versions prior to btcd 0.23.2, which stems from improper handling of witness size checks...

CVE-2022-44797

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...

Denial Of Service (DoS)

github.com/btcsuite/btcd is vulnerable to denial of service DoS. It is possible because the parseSig signature parsing function does not check the minimal message of size while checking the length of remaining message...

Downgrade Attack

github.com/btcsuite/btcd is vulnerable to downgrade attacks. The application doesn't enforce a TLS version, allowing a malicious user to conduct a protocol downgrade attack to a lower TLS version...

Denial Of Service

github.com/btcsuite/btcd is vulnerable to denial of service DoS attacks. A malicious user can cause the system to hang by sending multiple fake transactions because the system does not check if the transaction signature is valid...

Timing Attack

github.com/btcsuite/btcd is vulnerable to timing attacks. This vulnerability is caused because hashes are not compared in constant time, allowing malicious users to guess valid hashes based on the time that a comparison takes...