Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation (e.g., routing node, payment-receiver, or payment-sender). The impact is a loss of funds in certain situations.
Weakness
The product does not validate or incorrectly validates the integrity check values or “checksums” of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lightning_network_daemon | Lightning_network_daemon_project | 0.1-alpha (including) | 0.1-alpha (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.1.1-alpha (including) | 0.1.1-alpha (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.2-alpha (including) | 0.2-alpha (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.2.1-alpha (including) | 0.2.1-alpha (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.3-alpha (including) | 0.3-alpha (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.4-beta (including) | 0.4-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.4.1-beta (including) | 0.4.1-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.4.2-beta (including) | 0.4.2-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.5-beta (including) | 0.5-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.5-beta_rc1 (including) | 0.5-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.5-beta_rc2 (including) | 0.5-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.5.1-beta (including) | 0.5.1-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.5.1-beta_rc1 (including) | 0.5.1-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.5.1-beta_rc2 (including) | 0.5.1-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.5.1-beta_rc3 (including) | 0.5.1-beta_rc3 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.5.1-beta_rc4 (including) | 0.5.1-beta_rc4 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.5.2-beta (including) | 0.5.2-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.6-beta (including) | 0.6-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.6-beta_rc1 (including) | 0.6-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.6-beta_rc2 (including) | 0.6-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.6-beta_rc3 (including) | 0.6-beta_rc3 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.6-beta_rc4 (including) | 0.6-beta_rc4 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.6.1-beta (including) | 0.6.1-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.6.1-beta_rc1 (including) | 0.6.1-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.6.1-beta_rc2 (including) | 0.6.1-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.7.0-beta (including) | 0.7.0-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.7.0-beta_rc1 (including) | 0.7.0-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.7.0-beta_rc2 (including) | 0.7.0-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.7.0-beta_rc3 (including) | 0.7.0-beta_rc3 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.7.1-beta (including) | 0.7.1-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.7.1-beta_rc1 (including) | 0.7.1-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.7.1-beta_rc2 (including) | 0.7.1-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.8.0-beta (including) | 0.8.0-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.8.0-beta_rc1 (including) | 0.8.0-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.8.0-beta_rc2 (including) | 0.8.0-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.8.0-beta_rc3 (including) | 0.8.0-beta_rc3 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.8.1-beta (including) | 0.8.1-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.8.2-beta (including) | 0.8.2-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.8.2-beta_rc1 (including) | 0.8.2-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.8.2-beta_rc2 (including) | 0.8.2-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.9.0-beta (including) | 0.9.0-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.9.0-beta_rc1 (including) | 0.9.0-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.9.0-beta_rc2 (including) | 0.9.0-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.9.0-beta_rc3 (including) | 0.9.0-beta_rc3 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.9.0-beta_rc4 (including) | 0.9.0-beta_rc4 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.9.1-beta (including) | 0.9.1-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.9.1-beta_rc1 (including) | 0.9.1-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.9.2-beta (including) | 0.9.2-beta (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.10.0-beta_rc1 (including) | 0.10.0-beta_rc1 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.10.0-beta_rc2 (including) | 0.10.0-beta_rc2 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.10.0-beta_rc3 (including) | 0.10.0-beta_rc3 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.10.0-beta_rc4 (including) | 0.10.0-beta_rc4 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.10.0-beta_rc5 (including) | 0.10.0-beta_rc5 (including) |
| Lightning_network_daemon | Lightning_network_daemon_project | 0.10.0-beta_rc6 (including) | 0.10.0-beta_rc6 (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/145.html
- https://cwe.mitre.org/data/definitions/463.html
- https://cwe.mitre.org/data/definitions/75.html
References
- https://gist.github.com/ariard/fb432a9d2cd3ba24fdc18ccc8c5c6eb4
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002856.html
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002858.html
- https://gist.github.com/ariard/fb432a9d2cd3ba24fdc18ccc8c5c6eb4
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002856.html
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002858.html