Go/github.com/lightningnetwork/lnd CVE-2022-44797: critical 9.8, EPSS 1.30%
btcd mishandles witness size checking
Action: Upgrade github.com/lightningnetwork/lnd to 0.15.2-beta or later.
go get github.com/lightningnetwork/lnd@v0.15.2-betaAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.15.2-beta | - |
Fixed versions
| 0.15.2-beta |
Sources
- osv: GHSA-2chg-86hq-7w38#Go/github.com/lightningnetwork/lnd
- https://nvd.nist.gov/vuln/detail/CVE-2022-44797
- https://github.com/lightningnetwork/lnd/issues/7002
- https://github.com/btcsuite/btcd/pull/1896
- https://github.com/btcsuite/btcd/commit/7fdaf6958781df46fffee4bc8bee38801c066da8
- https://github.com/btcsuite/btcd
- https://github.com/btcsuite/btcd/releases/tag/v0.23.2
- https://github.com/lightningnetwork/lnd/releases/tag/v0.15.2-beta
- https://pkg.go.dev/vuln/GO-2022-1098
CVE-2022-44797 · published · modified · JSON