CVE-2022-44797

Description

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/lightningnetwork/lnd/issues/7002 ↗
• https://github.com/lightningnetwork/lnd/releases/tag/v0.15.2-beta ↗
• https://github.com/btcsuite/btcd/pull/1896 ↗
• https://github.com/btcsuite/btcd/releases/tag/v0.23.2 ↗