5
CVSSv2

CVE-2020-26895

Published: 21/10/2020 Updated: 30/10/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

before 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation (e.g., routing node, payment-receiver, or payment-sender). The impact is a loss of funds in certain situations.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

lightning network daemon project lightning network daemon 0.1

lightning network daemon project lightning network daemon 0.1.1

lightning network daemon project lightning network daemon 0.2

lightning network daemon project lightning network daemon 0.2.1

lightning network daemon project lightning network daemon 0.3

lightning network daemon project lightning network daemon 0.4

lightning network daemon project lightning network daemon 0.4.1

lightning network daemon project lightning network daemon 0.4.2

lightning network daemon project lightning network daemon 0.5

lightning network daemon project lightning network daemon 0.5.1

lightning network daemon project lightning network daemon 0.5.2

lightning network daemon project lightning network daemon 0.6

lightning network daemon project lightning network daemon 0.6.1

lightning network daemon project lightning network daemon 0.7.0

lightning network daemon project lightning network daemon 0.7.1

lightning network daemon project lightning network daemon 0.8.0

lightning network daemon project lightning network daemon 0.8.1

lightning network daemon project lightning network daemon 0.8.2

lightning network daemon project lightning network daemon 0.9.0

lightning network daemon project lightning network daemon 0.9.1

lightning network daemon project lightning network daemon 0.9.2

lightning network daemon project lightning network daemon 0.10.0