CVE-2021-41593

Katalog CVE

CVSS 8.6 · High EPSS 1,9%

Kerentanan Allocation of Resources Without Limits or Throttling pada lightning network daemon project lightning network daemon. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.

Rincian

Terbit di NVD

4 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 79,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.html mailing list · advisory vendor
• https://lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003257.html mailing list · advisory vendor
• https://lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003264.html exploit · mailing list · advisory vendor
• https://bitcoinmagazine.com/technical/good-griefing-a-lingering-vulnerability-on-lightning-network-that-still-... press/media coverage · advisory pihak ketiga
• https://github.com/lightningnetwork/lnd/blob/master/docs/release-notes/release-notes-0.13.3.md release notes · advisory pihak ketiga
• https://github.com/lightningnetwork/lnd/releases/tag/v0.13.3-beta advisory pihak ketiga