github.com/btcsuite/btcd
An alternative full node bitcoin implementation written in Go (golang)
Activity
- Latest release
- 1mo ago
- Total releases
- 44
- Cadence
- ~23 days
- Last 12 months
- 5
Reach
- Stars
- 6.7k
Details
- First release
- Nov 18, 2018
| Version | Released | |
|---|---|---|
v0.26.2
patch
|
v0.26.2
patch
Dependencies (23)
+ 15 more |
|
v0.26.1-beta.rc1
pre
|
v0.26.1-beta.rc1
pre
Dependencies (23)
+ 15 more |
|
v0.26.0
minor
|
v0.26.0
minor
Dependencies (22)
+ 14 more |
|
v0.26.0-beta.rc1
pre
|
v0.26.0-beta.rc1
pre
Dependencies (22)
+ 14 more |
|
v0.25.0
minor
|
v0.25.0
minor
Dependencies (19)
+ 11 more |
|
v0.25.0-beta.rc1
pre
|
v0.25.0-beta.rc1
pre
Dependencies (19)
+ 11 more |
|
v0.24.2
patch
|
v0.24.2
patch
Dependencies (17)
+ 9 more |
|
v0.24.2-beta.rc1
pre
|
v0.24.2-beta.rc1
pre
Dependencies (17)
+ 9 more |
|
v0.24.0
minor
1 CVE
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev |
v0.24.0
minor
Dependencies (17)
+ 9 more |
|
v0.23.4
patch
2 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev |
v0.23.4
patch
Dependencies (16)
+ 8 more |
|
v0.22.3
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.22.3
patch
Dependencies (12)
+ 4 more |
|
v0.23.3
patch
2 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev |
v0.23.3
patch
Dependencies (16)
+ 8 more |
|
v0.22.2
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.22.2
patch
Dependencies (12)
+ 4 more |
|
v0.23.2
patch
2 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev |
v0.23.2
patch
Dependencies (16)
+ 8 more |
|
v0.23.1
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.23.1
patch
Dependencies (16)
+ 8 more |
|
v0.23.0
minor
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.23.0
minor
Dependencies (16)
+ 8 more |
|
v0.22.1
minor
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.22.1
minor
Dependencies (12)
+ 4 more |
|
v0.22.0-beta
pre
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.22.0-beta
pre
Dependencies (11)
+ 3 more |
|
v0.18.1
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.18.1
patch
Dependencies (26)
+ 18 more |
|
v0.18.0
minor
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.18.0
minor
Dependencies (26)
+ 18 more |
|
v0.17.1
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.17.1
patch
Dependencies (17)
+ 9 more |
|
v0.17.0
minor
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.17.0
minor
Dependencies (17)
+ 9 more |
|
v0.21.0-beta
pre
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.21.0-beta
pre
Dependencies (11)
+ 3 more |
|
v0.16.5
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.16.5
patch
Dependencies (16)
+ 8 more |
|
v0.16.4
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.16.4
patch
Dependencies (16)
+ 8 more |
|
v0.16.3
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.16.3
patch
Dependencies (16)
+ 8 more |
|
v0.16.2
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.16.2
patch
Dependencies (16)
+ 8 more |
|
v0.16.1
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.16.1
patch
Dependencies (16)
+ 8 more |
|
v0.16.0
minor
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.16.0
minor
Dependencies (16)
+ 8 more |
|
v0.15.2
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.15.2
patch
Dependencies (16)
+ 8 more |
|
v0.15.1
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.15.1
patch
Dependencies (16)
+ 8 more |
|
v0.20.1-beta
pre
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.20.1-beta
pre
Dependencies (10)
+ 2 more |
|
v0.15.0
minor
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.15.0
minor
Dependencies (16)
+ 8 more |
|
v0.20.0-beta
pre
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.20.0-beta
pre
Dependencies (10)
+ 2 more |
|
v0.14.7
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.14.7
patch
Dependencies (17)
+ 9 more |
|
v0.14.6
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.14.6
patch
|
|
v0.14.5
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.14.5
patch
|
|
v0.14.4
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.14.4
patch
|
|
v0.14.3
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.14.3
patch
|
|
v0.14.2
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.14.2
patch
|
|
v0.14.1
patch
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.14.1
patch
|
|
v0.14.0
initial
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.14.0
initial
|
|
v0.13.0-beta2
pre
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.13.0-beta2
pre
|
|
v0.13.0-beta
pre
3 CVEs
CVE-2024-38365
GO-2024-3189
GHSA-27vh-h6mc-q6g8
Oct 15, 2024
Consensus failure in github.com/btcsuite/btcd The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's 'FindAndDelete()' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split (accepting an invalid block) or Denial of Service (DoS) attacks (rejecting a valid block). An attacker can trigger this vulnerability by constructing a 'standard' Bitcoin transaction that exhibits different behaviors in 'FindAndDelete()' and 'removeOpcodeByData()'. Fixed in
0.24.2-beta.rc1
References Updated Oct 17, 2024 · Source: OSV.dev
CVE-2024-34478
GO-2024-2818
GHSA-3jgf-r68h-xfqm
May 08, 2024
Consensus failures in github.com/btcsuite/btcd Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds. Fixed in
0.24.0
References
Updated May 20, 2024 · Source: OSV.dev
CVE-2022-44797
GO-2022-1098
GHSA-2chg-86hq-7w38
Nov 08, 2022
Denial of service in message decoding in github.com/btcsuite/btcd Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd (before 0.15.2-beta) to sync. Fixed in
0.23.2
References Updated May 20, 2024 · Source: OSV.dev |
v0.13.0-beta
pre
|