CVE-2022-44797
btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.
| Software | From | Fixed in |
|---|---|---|
| btcd_project / btcd | - | 0.23.2 |
github.com/btcsuite/btcd/wire
|
- | 0.23.2 |
|
github.com/lightningnetwork/lnd
|
- | 0.15.2-beta |
- https://github.com/btcsuite/btcd/pull/1896
- https://github.com/btcsuite/btcd/pull/1896/commits/f523d4ccaa5f34a2f761f16a05f5d6e6665b1168
- https://github.com/btcsuite/btcd/releases/tag/v0.23.2
- https://github.com/lightningnetwork/lnd/issues/7002
- https://github.com/lightningnetwork/lnd/releases/tag/v0.15.2-beta
- https://pkg.go.dev/vuln/GO-2022-1098
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime