CVE-2020-26895

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-26895
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26895.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-26895
Published
2020-10-21T02:15:12.660Z
Modified
2026-04-10T04:26:34.704507Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation (e.g., routing node, payment-receiver, or payment-sender). The impact is a loss of funds in certain situations.

References

Affected packages

Git / github.com/lightningnetwork/lnd

Affected ranges

Type
GIT
Repo
https://github.com/lightningnetwork/lnd
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4ccdad0d663f794181a368e5f006f34b28cf4df0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
40c7bac3aa280fade7e5a1d4746002cd5077e42b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
55e0dd32c65bcc8cfeddf060b14a9c1665437a17
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
07437f6ec41fcb8a1fcb06e5f7e8873685212d15
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
48712526d61c1512dff26211082a97b0605f270e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b866806d67d80e5963ed398f55ab800031df1bf1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6fa93a78c18180a3bc77116b749b3c5e279d5a33
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7cf5ebe2650b6798182e10be198c7ffc1f1d6e19
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b2c807288b1b7f40d609533c1e96a510ac5fa6d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
73af09a06ae9cd5ba92a376e8253ae5450fe09cc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fb95858afce6d7129758e7677bcb1552c5be2c51
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b07499f227bd78dbceaa8c6ee047f1c033716cdf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3f57f65bf0cb710159b0182391d1d75e9e3005bc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4da1c867c3209dab4e4a824b73d89fc38b616b37
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3b44542d395fe31ee4a9feb18b935266b42a6ab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
42c45979215e3242ef2e162ccd9de3cbb0ed28a1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d2186cc9da29853091175189268b073f49586cf0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
58ec9efed2a6c0a83a7008259984cc93cbfffd53
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2cc6687ff36fccd4b7df1c1f8c274c1e6002c137
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3a19afe46d8c1ffed84d416c74ee6e966f3c1c62
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
73791e15a17a74b6eb051dce0cf41e90a23595da
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f9a08044dc2388483e9b87ecb1e03d56ef311605
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c4415f04008c70be20b42f85e1ceff3ef99614c2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7f08c097fbbba96c5684e6ec6cf7ef2e4aab3324
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8307ac89a4d7cd6f06969fd78ae71f972a220787
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
36983214e8f7d24042fda61b048bb41daf6061da
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c5357d383d39a6a7abc970ff442c350a6bff6acc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e28ecd6164e77e86f38bc3ea692a4a60896acdf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6a4179e2248236a8f2cb96c6a7fed095069915bb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
add905d17f7bbb11d0df2761cdf8accf2fef2b00
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2058aed436481f124c64486a71c41503815fe178
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
add905d17f7bbb11d0df2761cdf8accf2fef2b00
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
73ceb9a06eb19e727a9e6cf140bda8924df977eb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7fcac54dffcc97964db22b0d8eaf31a9d751b76c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
867e972808958250eb0fd701a719e0402ca27233
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a623f9d3e8589866f3472deb7b1e8d60b4e092a7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0bff2ed5545d27d5c8e15c43d0885145267eb2ab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9cd40c5950bc4b8a0fcd2298e46aabe04b2ab8be
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
87851c2cdfd82fda6ac540220741fbc3ff77ddf7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0bc44ec5aaeb6db90ca365efde1f8e3a612641a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f8418ab705402d9cdfdac184c5e250c73f145e2d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
10f561dbbda6cf0ac80cc86dd6d87ab3862afdc9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3aba0f1eafa556d1b34742bbe4a07fc96b70db28
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ad0a89b844ec9f55b3ca4ddbb4d368dd8e3c0ea9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a2977c4438b5732029243ebd75ce044f33393562
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8aead58288bad3c14a4c4098e5eb24f44ddfad91
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a7cf1b4ff51e7af00548e093fc0e14539c4a523b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ab87dc5fe2fc5f9b3f8c4d5d6cabea796f46ae2d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
95e2809ba3e40bcb5c74a7b1ac71804a423180f6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eec3799da9cb7931ae0b36d757b2621dbc8fd60f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6591408a9ef7ff354b34810cfd30562482ee8df3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0bc05f9d6552c82bb1347f735f5a0c801ec5c551
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0cf63ae8981a1041dd7b9f217dcc2158a28247d3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1d548684e2b2bbbbf342ac3dd7076371550301ff
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.1-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.1.1-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.2-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.2.1-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.4-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.4.1-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.4.2-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5.1-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5.1-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5.1-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5.1-beta_rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5.1-beta_rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.5.2-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6-beta_rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6-beta_rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6.1-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6.1-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6.1-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.7.0-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.7.0-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.7.0-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.7.0-beta_rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.7.1-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.7.1-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.7.1-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.8.0-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.8.0-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.8.0-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.8.0-beta_rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.8.1-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.8.2-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.8.2-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.8.2-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.0-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.0-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.0-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.0-beta_rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.0-beta_rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.1-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.1-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.2-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.10.0-beta_rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.10.0-beta_rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.10.0-beta_rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.10.0-beta_rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.10.0-beta_rc5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.10.0-beta_rc6"
        }
    ]
}

Affected versions

0.*
0.4-beta
cert/v1.*
cert/v1.0.1
cert/v1.0.2
queue/v1.*
queue/v1.0.1
queue/v1.0.2
queue/v1.0.3
Other
upstream
v0.*
v0.1-alpha
v0.1.1-alpha
v0.10.0-beta.rc1
v0.10.0-beta.rc2
v0.10.0-beta.rc3
v0.10.0-beta.rc4
v0.10.0-beta.rc5
v0.10.0-beta.rc6
v0.2-alpha
v0.2.1-alpha
v0.3-alpha
v0.4-beta
v0.4.1-beta
v0.4.2-beta
v0.5-beta
v0.5-beta-rc1
v0.5-beta-rc2
v0.5.1-beta
v0.5.1-beta-rc1
v0.5.1-beta-rc2
v0.5.1-beta-rc3
v0.5.1-beta-rc4
v0.5.2-beta
v0.6-beta
v0.6-beta-rc1
v0.6-beta-rc2
v0.6-beta-rc3
v0.6-beta-rc4
v0.6.0-beta
v0.6.1-beta
v0.6.1-beta-rc1
v0.6.1-beta-rc2
v0.7.0-beta
v0.7.0-beta-rc1
v0.7.0-beta-rc2
v0.7.0-beta-rc3
v0.7.1-beta
v0.7.1-beta-rc1
v0.7.1-beta-rc2
v0.8.0-beta
v0.8.0-beta-rc1
v0.8.0-beta-rc2
v0.8.0-beta-rc3
v0.8.1-beta
v0.8.2-beta
v0.8.2-beta-rc1
v0.8.2-beta-rc2
v0.9.0-beta
v0.9.0-beta-rc1
v0.9.0-beta-rc2
v0.9.0-beta-rc3
v0.9.0-beta-rc4
v0.9.1-beta
v0.9.1-beta.rc1
v0.9.2-beta

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26895.json"