btcd mishandles witness size checking

CRITICO 9.8CVE-2022-44797 · GHSA-2chg-86hq-7w38 · GO-2022-1098 · Published 07/11/2022 · updated 17/06/2026

In breve

CVE-2022-44797 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda github.com/btcsuite/btcd, github.com/lightningnetwork/lnd, btcd (btcd project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.5% delle vulnerabilità.
Correzione: aggiornare a 0.23.2, 0.15.2-beta o successiva.

Package	Affected versions	Patched versions
github.com/btcsuite/btcd Go	`< 0.23.2`	`0.23.2`
github.com/lightningnetwork/lnd Go	`< 0.15.2-beta`	`0.15.2-beta`
btcd btcd_project	`< 0.23.2`	`0.23.2`

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

github.com/btcsuite/btcd/wire

NVD description

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

In breve

CVE-2022-44797 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda github.com/btcsuite/btcd, github.com/lightningnetwork/lnd, btcd (btcd project).

Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.5% delle vulnerabilità.

Correzione: aggiornare a 0.23.2, 0.15.2-beta o successiva.

Package

Affected versions

Patched versions

< 0.23.2

0.23.2

< 0.15.2-beta

0.15.2-beta

< 0.23.2

0.23.2

Description

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

github.com/btcsuite/btcd/wire

NVD description

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

Altre vulnerabilità di github.com/btcsuite/btcd

Vedi tutto →