Btcd · Btcd · CVE-2022-44797
**Name of the Vulnerable Software and Affected Versions**
btcd versions prior to 0.23.2
lnd versions prior to 0.15.2-beta
**Description**
The issue is related to the mishandling of witness size checking, which can cause denial of service due to erroneous message decoding. Improper checking of maximum witness size during node message decoding prevents nodes from syncing.
**Recommendations**
For btcd versions prior to 0.23.2, update to version 0.23.2 or later.
For lnd versions prior to 0.15.2-beta, update to version 0.15.2-beta or later.