CVE-2021-41592

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-41592

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41592.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-41592

Published

2021-10-04T17:15:08.677Z

Modified

2026-07-09T03:25:25.096523Z

Severity

9.4 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H CVSS Calculator

Summary

[none]

Details

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.

References

Affected packages

Git / github.com/elementsproject/lightning

Affected ranges

Type

GIT

Repo

https://github.com/elementsproject/lightning

Events

Introduced

Last affected

f935107d01bbee115c572debe69adac96a91c7c4

Database specific

{
    "cpe": "cpe:2.3:a:elementsproject:c-lightning:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.10.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

Other

hello

plugin-2-deadend

where-the-500-went

v0.*

v0.1-2015-08-08

v0.10.0

v0.10.0rc1

v0.10.0rc2

v0.10.1

v0.10.1rc1

v0.10.1rc2

v0.2-2016-01-22

v0.3-2016-05-26

v0.4-2016-08-19

v0.5-2016-10-19

v0.5.1-2016-10-21

v0.5.2-2016-11-21

v0.6

v0.6.1rc1

v0.6.1rc2

v0.6.2

v0.6.2rc1

v0.6.3rc1

v0.6rc1

v0.6rc2

v0.7.0

v0.7.0rc1

v0.7.0rc2

v0.7.0rc3

v0.7.1

v0.7.1rc1

v0.7.1rc2

v0.7.1rc3

v0.7.1rc4

v0.7.1rc5

v0.7.2

v0.7.2.1

v0.7.2rc1

v0.7.2rc2

v0.7.3

v0.7.3rc1

v0.7.3rc2

v0.7.3rc3

v0.8.0

v0.8.0rc1

v0.8.0rc2

v0.8.1

v0.8.1rc1

v0.8.1rc2

v0.8.1rc3

v0.8.2

v0.8.2rc1

v0.8.2rc2

v0.8.2rc3

v0.9.0

v0.9.0rc1

v0.9.0rc2

v0.9.0rc3

v0.9.0rc4

v0.9.1

v0.9.1rc1

v0.9.1rc2

v0.9.2

v0.9.2rc1

v0.9.2rc2

v0.9.3

v0.9.3rc1

v0.9.3rc2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41592.json"