CVE-2021-41593
- Source
- https://cve.org/CVERecord?id=CVE-2021-41593
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41593.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-41593
- Published
- 2021-10-04T17:15:08Z
- Modified
- 2026-10-20T10:54:01Z
- Severity
-
- 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L CVSS Calculator
- Summary
- [none]
- Details
-
Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "fixed": "0.11.0" } ], "source": "CPE_RANGE" } ], "vendor_product": "lightning_network_daemon_project:lightning_network_daemon" }, { "cpes": [ "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:-:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "0.11.0-NA" }, { "last_affected": "0.11.0-NA" } ], "source": "CPE_STRING" } ], "vendor_product": "lightning_network_daemon_project:lightning_network_daemon" } ] }- References
-
- https://bitcoinmagazine.com/technical/good-griefing-a-lingering-vulnerability-on-lightning-network-that-still-needs-fixing
- https://github.com/lightningnetwork/lnd/blob/master/docs/release-notes/release-notes-0.13.3.md
- https://github.com/lightningnetwork/lnd/releases/tag/v0.13.3-beta
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.html
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003257.html
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003264.html
Affected packages
Git / github.com/lightningnetwork/lnd
Affected ranges
- Type
- GIT
- Repo
- https://github.com/lightningnetwork/lnd
- Events
-
IntroducedLast AffectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta:*:*:*:*:*:*", "range": [ { "introduced": "0.11.0-beta" }, { "last_affected": "0.11.0-beta" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc1:*:*:*:*:*:*", "range": [ { "introduced": "0.11.0-beta_rc1" }, { "last_affected": "0.11.0-beta_rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc2:*:*:*:*:*:*", "range": [ { "introduced": "0.11.0-beta_rc2" }, { "last_affected": "0.11.0-beta_rc2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc3:*:*:*:*:*:*", "range": [ { "introduced": "0.11.0-beta_rc3" }, { "last_affected": "0.11.0-beta_rc3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc4:*:*:*:*:*:*", "range": [ { "introduced": "0.11.0-beta_rc4" }, { "last_affected": "0.11.0-beta_rc4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta:*:*:*:*:*:*", "range": [ { "introduced": "0.11.1-beta" }, { "last_affected": "0.11.1-beta" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc1:*:*:*:*:*:*", "range": [ { "introduced": "0.11.1-beta_rc1" }, { "last_affected": "0.11.1-beta_rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc2:*:*:*:*:*:*", "range": [ { "introduced": "0.11.1-beta_rc2" }, { "last_affected": "0.11.1-beta_rc2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc3:*:*:*:*:*:*", "range": [ { "introduced": "0.11.1-beta_rc3" }, { "last_affected": "0.11.1-beta_rc3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc4:*:*:*:*:*:*", "range": [ { "introduced": "0.11.1-beta_rc4" }, { "last_affected": "0.11.1-beta_rc4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc5:*:*:*:*:*:*", "range": [ { "introduced": "0.11.1-beta_rc5" }, { "last_affected": "0.11.1-beta_rc5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta:*:*:*:*:*:*", "range": [ { "introduced": "0.12.0-beta" }, { "last_affected": "0.12.0-beta" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc1:*:*:*:*:*:*", "range": [ { "introduced": "0.12.0-beta_rc1" }, { "last_affected": "0.12.0-beta_rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc2:*:*:*:*:*:*", "range": [ { "introduced": "0.12.0-beta_rc2" }, { "last_affected": "0.12.0-beta_rc2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc3:*:*:*:*:*:*", "range": [ { "introduced": "0.12.0-beta_rc3" }, { "last_affected": "0.12.0-beta_rc3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc4:*:*:*:*:*:*", "range": [ { "introduced": "0.12.0-beta_rc4" }, { "last_affected": "0.12.0-beta_rc4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc5:*:*:*:*:*:*", "range": [ { "introduced": "0.12.0-beta_rc5" }, { "last_affected": "0.12.0-beta_rc5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc6:*:*:*:*:*:*", "range": [ { "introduced": "0.12.0-beta_rc6" }, { "last_affected": "0.12.0-beta_rc6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta:*:*:*:*:*:*", "range": [ { "introduced": "0.12.1-beta" }, { "last_affected": "0.12.1-beta" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc1:*:*:*:*:*:*", "range": [ { "introduced": "0.12.1-beta_rc1" }, { "last_affected": "0.12.1-beta_rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc2:*:*:*:*:*:*", "range": [ { "introduced": "0.12.1-beta_rc2" }, { "last_affected": "0.12.1-beta_rc2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc3:*:*:*:*:*:*", "range": [ { "introduced": "0.12.1-beta_rc3" }, { "last_affected": "0.12.1-beta_rc3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc4:*:*:*:*:*:*", "range": [ { "introduced": "0.12.1-beta_rc4" }, { "last_affected": "0.12.1-beta_rc4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc5:*:*:*:*:*:*", "range": [ { "introduced": "0.12.1-beta_rc5" }, { "last_affected": "0.12.1-beta_rc5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc6:*:*:*:*:*:*", "range": [ { "introduced": "0.12.1-beta_rc6" }, { "last_affected": "0.12.1-beta_rc6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta:*:*:*:*:*:*", "range": [ { "introduced": "0.13.0-beta" }, { "last_affected": "0.13.0-beta" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc1:*:*:*:*:*:*", "range": [ { "introduced": "0.13.0-beta_rc1" }, { "last_affected": "0.13.0-beta_rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc2:*:*:*:*:*:*", "range": [ { "introduced": "0.13.0-beta_rc2" }, { "last_affected": "0.13.0-beta_rc2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc3:*:*:*:*:*:*", "range": [ { "introduced": "0.13.0-beta_rc3" }, { "last_affected": "0.13.0-beta_rc3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc4:*:*:*:*:*:*", "range": [ { "introduced": "0.13.0-beta_rc4" }, { "last_affected": "0.13.0-beta_rc4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc5:*:*:*:*:*:*", "range": [ { "introduced": "0.13.0-beta_rc5" }, { "last_affected": "0.13.0-beta_rc5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.1:beta:*:*:*:*:*:*", "range": [ { "introduced": "0.13.1-beta" }, { "last_affected": "0.13.1-beta" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.1:beta_rc1:*:*:*:*:*:*", "range": [ { "introduced": "0.13.1-beta_rc1" }, { "last_affected": "0.13.1-beta_rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.1:beta_rc2:*:*:*:*:*:*", "range": [ { "introduced": "0.13.1-beta_rc2" }, { "last_affected": "0.13.1-beta_rc2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.2:beta:*:*:*:*:*:*", "range": [ { "introduced": "0.13.2-beta" }, { "last_affected": "0.13.2-beta" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.3:beta_rc2:*:*:*:*:*:*", "range": [ { "introduced": "0.13.3-beta_rc2" }, { "last_affected": "0.13.3-beta_rc2" } ], "source": "CPE_STRING" }, { "original_tag": "v0.13.3-beta", "range": [ { "fixed": "4f567577db9d85b6f392f960b3aabddcad3cd02c" } ], "source": "REFERENCES_TAG" } ] }
Affected versions
0.*
0.11.0-beta
0.11.0-beta_rc1
0.11.0-beta_rc2
0.11.0-beta_rc3
0.11.0-beta_rc4
0.11.1-beta
0.11.1-beta_rc1
0.11.1-beta_rc2
0.11.1-beta_rc3
0.11.1-beta_rc4
0.11.1-beta_rc5
0.12.0-beta
0.12.0-beta_rc1
0.12.0-beta_rc2
0.12.0-beta_rc3
0.12.0-beta_rc4
0.12.0-beta_rc5
0.12.0-beta_rc6
0.12.1-beta
0.12.1-beta_rc1
0.12.1-beta_rc2
0.12.1-beta_rc3
0.12.1-beta_rc4
0.12.1-beta_rc5
0.12.1-beta_rc6
0.13.0-beta
0.13.0-beta_rc1
0.13.0-beta_rc2
0.13.0-beta_rc3
0.13.0-beta_rc4
0.13.0-beta_rc5
0.13.1-beta
0.13.1-beta_rc1
0.13.1-beta_rc2
0.13.2-beta
0.13.3-beta_rc2
cert/v1.*
cert/v1.0.3
healthcheck/v1.*
healthcheck/v1.0.0
kvdb/v1.*
kvdb/v1.0.0
v0.*
v0.11.0-beta
v0.12.0-beta
v0.12.0-beta.rc1
v0.12.0-beta.rc2
v0.12.0-beta.rc3
v0.12.0-beta.rc4
v0.12.0-beta.rc5
v0.12.0-beta.rc6
v0.13.0-beta
v0.13.0-beta.rc1
v0.13.0-beta.rc2
v0.13.0-beta.rc3
v0.13.0-beta.rc4
v0.13.0-beta.rc5
v0.13.1-beta
v0.13.1-beta.rc2
v0.13.2-beta
v0.13.3-beta.rc2