btcd mishandles witness size checking

심각 9.8CVE-2022-44797 · GHSA-2chg-86hq-7w38 · GO-2022-1098 · Published 07/11/2022 · updated 17/06/2026

요약

CVE-2022-44797은(는) github.com/btcsuite/btcd, github.com/lightningnetwork/lnd, btcd (btcd project)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.3%, 전체 취약점의 70.5%보다 높음.
조치: 0.23.2, 0.15.2-beta 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
github.com/btcsuite/btcd Go	`< 0.23.2`	`0.23.2`
github.com/lightningnetwork/lnd Go	`< 0.15.2-beta`	`0.15.2-beta`
btcd btcd_project	`< 0.23.2`	`0.23.2`

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

github.com/btcsuite/btcd/wire

NVD description

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

요약

CVE-2022-44797은(는) github.com/btcsuite/btcd, github.com/lightningnetwork/lnd, btcd (btcd project)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.

향후 30일 내 악용 확률(EPSS): 1.3%, 전체 취약점의 70.5%보다 높음.

조치: 0.23.2, 0.15.2-beta 이상으로 업데이트하세요.

Package

Affected versions

Patched versions

< 0.23.2

0.23.2

< 0.15.2-beta

0.15.2-beta

< 0.23.2

0.23.2

Description

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

github.com/btcsuite/btcd/wire

NVD description

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

github.com/btcsuite/btcd의 다른 취약점

모두 보기 →