{"id":"CVE-2021-41593","details":"Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.","modified":"2026-07-08T06:03:36.280888974Z","published":"2021-10-04T17:15:08.727Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"fixed":"0.11.0"}],"source":"CPE_RANGE","vendor_product":"lightning_network_daemon_project:lightning_network_daemon","cpes":["cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:*:*:*:*:*:*:*:*"]},{"vendor_product":"lightning_network_daemon_project:lightning_network_daemon","cpes":["cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:-:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0.11.0-NA"},{"last_affected":"0.11.0-NA"}],"source":"CPE_STRING"}]},"references":[{"type":"ADVISORY","url":"https://bitcoinmagazine.com/technical/good-griefing-a-lingering-vulnerability-on-lightning-network-that-still-needs-fixing"},{"type":"ADVISORY","url":"https://github.com/lightningnetwork/lnd/blob/master/docs/release-notes/release-notes-0.13.3.md"},{"type":"ADVISORY","url":"https://github.com/lightningnetwork/lnd/releases/tag/v0.13.3-beta"},{"type":"ADVISORY","url":"https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.html"},{"type":"ADVISORY","url":"https://lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003257.html"},{"type":"EVIDENCE","url":"https://lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003264.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/lightningnetwork/lnd","events":[{"introduced":"3ae46d81f4a2edad06ef778b2940d9b06386d93b"},{"last_affected":"186b6cce2b3a96d6d79f1b364ceb1ab18f37f841"},{"fixed":"4f567577db9d85b6f392f960b3aabddcad3cd02c"}],"database_specific":{"extracted_events":[{"introduced":"0.11.0-beta"},{"last_affected":"0.11.0-beta"},{"introduced":"0.11.0-beta_rc1"},{"last_affected":"0.11.0-beta_rc1"},{"introduced":"0.11.0-beta_rc2"},{"last_affected":"0.11.0-beta_rc2"},{"introduced":"0.11.0-beta_rc3"},{"last_affected":"0.11.0-beta_rc3"},{"introduced":"0.11.0-beta_rc4"},{"last_affected":"0.11.0-beta_rc4"},{"introduced":"0.11.1-beta"},{"last_affected":"0.11.1-beta"},{"introduced":"0.11.1-beta_rc1"},{"last_affected":"0.11.1-beta_rc1"},{"introduced":"0.11.1-beta_rc2"},{"last_affected":"0.11.1-beta_rc2"},{"introduced":"0.11.1-beta_rc3"},{"last_affected":"0.11.1-beta_rc3"},{"introduced":"0.11.1-beta_rc4"},{"last_affected":"0.11.1-beta_rc4"},{"introduced":"0.11.1-beta_rc5"},{"last_affected":"0.11.1-beta_rc5"},{"introduced":"0.12.0-beta"},{"last_affected":"0.12.0-beta"},{"introduced":"0.12.0-beta_rc1"},{"last_affected":"0.12.0-beta_rc1"},{"introduced":"0.12.0-beta_rc2"},{"last_affected":"0.12.0-beta_rc2"},{"introduced":"0.12.0-beta_rc3"},{"last_affected":"0.12.0-beta_rc3"},{"introduced":"0.12.0-beta_rc4"},{"last_affected":"0.12.0-beta_rc4"},{"introduced":"0.12.0-beta_rc5"},{"last_affected":"0.12.0-beta_rc5"},{"introduced":"0.12.0-beta_rc6"},{"last_affected":"0.12.0-beta_rc6"},{"introduced":"0.12.1-beta"},{"last_affected":"0.12.1-beta"},{"introduced":"0.12.1-beta_rc1"},{"last_affected":"0.12.1-beta_rc1"},{"introduced":"0.12.1-beta_rc2"},{"last_affected":"0.12.1-beta_rc2"},{"introduced":"0.12.1-beta_rc3"},{"last_affected":"0.12.1-beta_rc3"},{"introduced":"0.12.1-beta_rc4"},{"last_affected":"0.12.1-beta_rc4"},{"introduced":"0.12.1-beta_rc5"},{"last_affected":"0.12.1-beta_rc5"},{"introduced":"0.12.1-beta_rc6"},{"last_affected":"0.12.1-beta_rc6"},{"introduced":"0.13.0-beta"},{"last_affected":"0.13.0-beta"},{"introduced":"0.13.0-beta_rc1"},{"last_affected":"0.13.0-beta_rc1"},{"introduced":"0.13.0-beta_rc2"},{"last_affected":"0.13.0-beta_rc2"},{"introduced":"0.13.0-beta_rc3"},{"last_affected":"0.13.0-beta_rc3"},{"introduced":"0.13.0-beta_rc4"},{"last_affected":"0.13.0-beta_rc4"},{"introduced":"0.13.0-beta_rc5"},{"last_affected":"0.13.0-beta_rc5"},{"introduced":"0.13.1-beta"},{"last_affected":"0.13.1-beta"},{"introduced":"0.13.1-beta_rc1"},{"last_affected":"0.13.1-beta_rc1"},{"introduced":"0.13.1-beta_rc2"},{"last_affected":"0.13.1-beta_rc2"},{"introduced":"0.13.2-beta"},{"last_affected":"0.13.2-beta"},{"introduced":"0.13.3-beta_rc2"},{"last_affected":"0.13.3-beta_rc2"}],"source":["CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc1:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc2:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc3:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.0:beta_rc4:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc1:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc2:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc3:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc4:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.11.1:beta_rc5:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc1:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc2:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc3:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc4:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc5:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.0:beta_rc6:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc1:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc2:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc3:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc4:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc5:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.12.1:beta_rc6:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc1:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc2:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc3:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc4:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.0:beta_rc5:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.1:beta:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.1:beta_rc1:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.1:beta_rc2:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.2:beta:*:*:*:*:*:*","cpe:2.3:a:lightning_network_daemon_project:lightning_network_daemon:0.13.3:beta_rc2:*:*:*:*:*:*"]}}],"versions":["0.11.0-beta","0.11.0-beta_rc1","0.11.0-beta_rc2","0.11.0-beta_rc3","0.11.0-beta_rc4","0.11.1-beta","0.11.1-beta_rc1","0.11.1-beta_rc2","0.11.1-beta_rc3","0.11.1-beta_rc4","0.11.1-beta_rc5","0.12.0-beta","0.12.0-beta_rc1","0.12.0-beta_rc2","0.12.0-beta_rc3","0.12.0-beta_rc4","0.12.0-beta_rc5","0.12.0-beta_rc6","0.12.1-beta","0.12.1-beta_rc1","0.12.1-beta_rc2","0.12.1-beta_rc3","0.12.1-beta_rc4","0.12.1-beta_rc5","0.12.1-beta_rc6","0.13.0-beta","0.13.0-beta_rc1","0.13.0-beta_rc2","0.13.0-beta_rc3","0.13.0-beta_rc4","0.13.0-beta_rc5","0.13.1-beta","0.13.1-beta_rc1","0.13.1-beta_rc2","0.13.2-beta","0.13.3-beta_rc2","v0.13.3-beta.rc2","v0.13.2-beta","v0.13.1-beta","v0.13.1-beta.rc2","v0.13.0-beta.rc5","v0.13.0-beta","v0.13.0-beta.rc4","v0.13.0-beta.rc3","v0.13.0-beta.rc2","v0.13.0-beta.rc1","kvdb/v1.0.0","healthcheck/v1.0.0","v0.12.0-beta","v0.12.0-beta.rc6","v0.12.0-beta.rc5","v0.12.0-beta.rc4","v0.12.0-beta.rc3","v0.12.0-beta.rc2","v0.12.0-beta.rc1","v0.11.0-beta","cert/v1.0.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41593.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L"}]}