CVE-2020-26895: lightning network daemon project lightning n…

csirt@kutim:~/threat-intel/cve/CVE-2020-26895

CVSS 5.3 · Medium EPSS 0,71%

Kerentanan Improper Validation of Integrity Check Value pada lightning network daemon project lightning network daemon. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation (e.g., routing node, payment-receiver, or payment-sender). The impact is a loss of funds in certain situations.

Rincian

Terbit di NVD: 21 Oktober 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-354: Improper Validation of Integrity Check Value
EPSS (30 hari): 0,71% peluang dieksploitasi; lebih tinggi dari 52,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
lightning network daemon project	lightning network daemon	Versi 0.1 alpha
lightning network daemon project	lightning network daemon	Versi 0.1.1 alpha
lightning network daemon project	lightning network daemon	Versi 0.2 alpha
lightning network daemon project	lightning network daemon	Versi 0.2.1 alpha
lightning network daemon project	lightning network daemon	Versi 0.3 alpha
lightning network daemon project	lightning network daemon	Versi 0.4 beta
lightning network daemon project	lightning network daemon	Versi 0.4.1 beta
lightning network daemon project	lightning network daemon	Versi 0.4.2 beta
lightning network daemon project	lightning network daemon	Versi 0.5 beta
lightning network daemon project	lightning network daemon	Versi 0.5 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.5 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.5.1 beta
lightning network daemon project	lightning network daemon	Versi 0.5.1 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.5.1 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.5.1 beta_rc3
lightning network daemon project	lightning network daemon	Versi 0.5.1 beta_rc4
lightning network daemon project	lightning network daemon	Versi 0.5.2 beta
lightning network daemon project	lightning network daemon	Versi 0.6 beta
lightning network daemon project	lightning network daemon	Versi 0.6 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.6 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.6 beta_rc3
lightning network daemon project	lightning network daemon	Versi 0.6 beta_rc4
lightning network daemon project	lightning network daemon	Versi 0.6.1 beta
lightning network daemon project	lightning network daemon	Versi 0.6.1 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.6.1 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.7.0 beta
lightning network daemon project	lightning network daemon	Versi 0.7.0 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.7.0 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.7.0 beta_rc3
lightning network daemon project	lightning network daemon	Versi 0.7.1 beta
lightning network daemon project	lightning network daemon	Versi 0.7.1 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.7.1 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.8.0 beta
lightning network daemon project	lightning network daemon	Versi 0.8.0 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.8.0 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.8.0 beta_rc3
lightning network daemon project	lightning network daemon	Versi 0.8.1 beta
lightning network daemon project	lightning network daemon	Versi 0.8.2 beta
lightning network daemon project	lightning network daemon	Versi 0.8.2 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.8.2 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.9.0 beta
lightning network daemon project	lightning network daemon	Versi 0.9.0 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.9.0 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.9.0 beta_rc3
lightning network daemon project	lightning network daemon	Versi 0.9.0 beta_rc4
lightning network daemon project	lightning network daemon	Versi 0.9.1 beta
lightning network daemon project	lightning network daemon	Versi 0.9.1 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.9.2 beta
lightning network daemon project	lightning network daemon	Versi 0.10.0 beta_rc1
lightning network daemon project	lightning network daemon	Versi 0.10.0 beta_rc2
lightning network daemon project	lightning network daemon	Versi 0.10.0 beta_rc3
lightning network daemon project	lightning network daemon	Versi 0.10.0 beta_rc4
lightning network daemon project	lightning network daemon	Versi 0.10.0 beta_rc5
lightning network daemon project	lightning network daemon	Versi 0.10.0 beta_rc6

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://gist.github.com/ariard/fb432a9d2cd3ba24fdc18ccc8c5c6eb4 advisory pihak ketiga
https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002856.html mailing list · advisory pihak ketiga
https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002858.html mailing list · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.