CVE-2021-41593: High severity Lightning Network Daemon Project Lightning Network Daemon vulnerability
Published Oct 4, 2021
·Updated
Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.
Affected Software
38 affected components
Lightning Network Daemon Project Lightning Network Daemon<0.11.0
Lightning Network Daemon Project Lightning Network Daemon=0.11.0
Lightning Network Daemon Project Lightning Network Daemon=0.11.0-beta
Lightning Network Daemon Project Lightning Network Daemon=0.11.0-beta_rc1
Lightning Network Daemon Project Lightning Network Daemon=0.11.0-beta_rc2
Lightning Network Daemon Project Lightning Network Daemon=0.11.0-beta_rc3
Lightning Network Daemon Project Lightning Network Daemon=0.11.0-beta_rc4
Lightning Network Daemon Project Lightning Network Daemon=0.11.1-beta
Lightning Network Daemon Project Lightning Network Daemon=0.11.1-beta_rc1
Lightning Network Daemon Project Lightning Network Daemon=0.11.1-beta_rc2
Lightning Network Daemon Project Lightning Network Daemon=0.11.1-beta_rc3
Lightning Network Daemon Project Lightning Network Daemon=0.11.1-beta_rc4
Lightning Network Daemon Project Lightning Network Daemon=0.11.1-beta_rc5
Lightning Network Daemon Project Lightning Network Daemon=0.12.0-beta
Lightning Network Daemon Project Lightning Network Daemon=0.12.0-beta_rc1
Lightning Network Daemon Project Lightning Network Daemon=0.12.0-beta_rc2
Lightning Network Daemon Project Lightning Network Daemon=0.12.0-beta_rc3
Lightning Network Daemon Project Lightning Network Daemon=0.12.0-beta_rc4
Lightning Network Daemon Project Lightning Network Daemon=0.12.0-beta_rc5
Lightning Network Daemon Project Lightning Network Daemon=0.12.0-beta_rc6
Lightning Network Daemon Project Lightning Network Daemon=0.12.1-beta
Lightning Network Daemon Project Lightning Network Daemon=0.12.1-beta_rc1
Lightning Network Daemon Project Lightning Network Daemon=0.12.1-beta_rc2
Lightning Network Daemon Project Lightning Network Daemon=0.12.1-beta_rc3
Lightning Network Daemon Project Lightning Network Daemon=0.12.1-beta_rc4
Lightning Network Daemon Project Lightning Network Daemon=0.12.1-beta_rc5
Lightning Network Daemon Project Lightning Network Daemon=0.12.1-beta_rc6
Lightning Network Daemon Project Lightning Network Daemon=0.13.0-beta
Lightning Network Daemon Project Lightning Network Daemon=0.13.0-beta_rc1
Lightning Network Daemon Project Lightning Network Daemon=0.13.0-beta_rc2
Lightning Network Daemon Project Lightning Network Daemon=0.13.0-beta_rc3
Lightning Network Daemon Project Lightning Network Daemon=0.13.0-beta_rc4
Lightning Network Daemon Project Lightning Network Daemon=0.13.0-beta_rc5
Lightning Network Daemon Project Lightning Network Daemon=0.13.1-beta
Lightning Network Daemon Project Lightning Network Daemon=0.13.1-beta_rc1
Lightning Network Daemon Project Lightning Network Daemon=0.13.1-beta_rc2
Lightning Network Daemon Project Lightning Network Daemon=0.13.2-beta
Lightning Network Daemon Project Lightning Network Daemon=0.13.3-beta_rc2
Event History
Oct 4, 2021
CVE Published
via MITRE·04:54 PM
Data Sourced
via MITRE·04:54 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-41593?
The severity of CVE-2021-41593 is considered high due to the potential for loss of funds.
2
How do I fix CVE-2021-41593?
To fix CVE-2021-41593, upgrade your Lightning Network Daemon to version 0.13.3-beta or later.
3
What impact can CVE-2021-41593 have on my system?
CVE-2021-41593 can lead to exposure of dust HTLCs, resulting in potential loss of funds.
4
Which versions of the Lightning Network Daemon are affected by CVE-2021-41593?
CVE-2021-41593 affects versions of the Lightning Network Daemon prior to 0.13.3-beta.
5
What type of vulnerability is CVE-2021-41593?
CVE-2021-41593 is categorized as a funds exposure vulnerability within the Lightning Network.