CVE-2022-39389 : Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overl

Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version `v0.15.4` are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments and forward HTLCs, and close out channels. Opening channels is prohibited, and also on chain transaction events will be undetected. This can cause loss of funds if a CSV expiry is researched during a breach attempt or a CLTV delta expires forgetting the funds in the HTLC. A patch is available in `lnd` version 0.15.4. Users are advised to upgrade. Users unable to upgrade may use the `lncli updatechanpolicy` RPC call to increase their CLTV value to a very high amount or increase their fee policies. This will prevent nodes from routing through your node, meaning that no pending HTLCs can be present.

Published 2022-11-17 22:15:11

Updated 2022-11-22 16:49:51

Source GitHub, Inc.

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2022-39389

Btcd Project » Btcd
Versions before (<) 0.23.3
cpe:2.3:a:btcd_project:btcd:*:*:*:*:*:*:*:*
Matching versions
Lightning Network Daemon Project » Lightning Network Daemon
Versions before (<) 0.15.4
cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-39389

EPSS FAQ

0.10%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 40 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-39389

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L	3.9	2.5	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: Low
8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H	3.9	4.2	GitHub, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: High

CWE ids for CVE-2022-39389

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: security-advisories@github.com (Primary)

References for CVE-2022-39389

https://github.com/lightningnetwork/lnd/issues/7096

[bug]: CRITICAL! Unable to process chain reorg / too many witness items to fit into max message size · Issue #7096 · lightningnetwork/lnd · GitHub
Exploit;Issue Tracking;Patch;Third Party Advisory
https://github.com/lightningnetwork/lnd/releases/tag/v0.15.4-beta

Release lnd v0.15.4-beta · lightningnetwork/lnd · GitHub
Release Notes;Third Party Advisory
https://github.com/lightningnetwork/lnd/pull/7098

mod+build: bump btcd version to v0.23.3 and bump lnd version to v0.15.4-beta by guggero · Pull Request #7098 · lightningnetwork/lnd · GitHub
Patch;Third Party Advisory
https://github.com/lightningnetwork/lnd/security/advisories/GHSA-hc82-w9v8-83pr

Witness Block Parsing DoS Vulnerability · Advisory · lightningnetwork/lnd · GitHub
Third Party Advisory

Jump to

Vulnerability Details : CVE-2022-39389

Products affected by CVE-2022-39389

Exploit prediction scoring system (EPSS) score for CVE-2022-39389

CVSS scores for CVE-2022-39389

CWE ids for CVE-2022-39389

References for CVE-2022-39389