PT-2022-24948 · Unknown · Lightning Network Daemon

Roasbeef · Published 2022-11-17 · Updated 2022-11-22 · CVE-2022-39389

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Lightning Network Daemon (lnd) versions prior to 0.15.4

Description The issue is related to a block parsing bug that can cause a node to enter a degraded state. In this state, nodes can continue to make payments and forward HTLCs, and close out channels, but opening channels is prohibited and on-chain transaction events will be undetected. This can lead to loss of funds if a CSV expiry is researched during a breach attempt or a CLTV delta expires, forgetting the funds in the HTLC.

Recommendations For versions prior to 0.15.4, upgrade to version 0.15.4 or later to resolve the issue. As a temporary workaround for users unable to upgrade, use the lncli updatechanpolicy RPC call to increase the CLTV value to a very high amount or increase fee policies, preventing nodes from routing through your node and minimizing the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-39389

GHSA-HC82-W9V8-83PR

Affected Products

Lightning Network Daemon

References · 10

• 🔥 https://github.com/lightningnetwork/lnd/issues/7096 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39389.json · Exploit
• https://github.com/lightningnetwork/lnd/pull/7098 · Patch
• https://osv.dev/vulnerability/GHSA-hc82-w9v8-83pr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39389 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39389 · Vendor Advisory
• https://github.com/lightningnetwork/lnd/releases/tag/v0.15.4-beta · Note
• https://github.com/lightningnetwork/lnd/security/advisories/GHSA-hc82-w9v8-83pr · Note
• https://github.com/lightningnetwork/lnd · Note
• https://t.me/cibsecurity/53112 · Telegram Post