Lightning Network Daemon Project

Lightning Network Daemon

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2024-38359

  • EPSS 0.18%
  • Veröffentlicht 20.06.2024 23:15:52
  • Zuletzt bearbeitet 21.11.2024 09:25:26

The Lightning Network Daemon (lnd) - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0....

6.5

CVE-2022-39389

Exploit
  • EPSS 0.61%
  • Veröffentlicht 17.11.2022 22:15:10
  • Zuletzt bearbeitet 21.11.2024 07:18:11

Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version `v0.15.4` are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this de...

8.6

CVE-2021-41593

Medienbericht Exploit
  • EPSS 0.72%
  • Veröffentlicht 04.10.2021 17:15:08
  • Zuletzt bearbeitet 21.11.2024 06:26:29

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.

5.3

CVE-2020-26895

  • EPSS 0.15%
  • Veröffentlicht 21.10.2020 02:15:12
  • Zuletzt bearbeitet 21.11.2024 05:20:26

Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victi...

8.2

CVE-2020-26896

  • EPSS 0.2%
  • Veröffentlicht 21.10.2020 02:15:12
  • Zuletzt bearbeitet 21.11.2024 05:20:26

Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-chain HTLC was already settled before releasing the...