by Kastro
Paper/Archive/CVE-2021-41592

CVE-2021-41592

mitre — Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.

EPSS 2%CVSS 9.4
critical.is priorityof 100
43
CVSS 9.4 (NVD)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 75.0.750 × 2015.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

References

reflists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.htmlrefbitcoinmagazine.com/technical/good-griefing-a-lingering-vulnerability-on-lightning-network-that-still-needs-fixingrefgithub.com/ElementsProject/lightningreflists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003257.htmlreflists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003264.html