Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2021-41591: ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.
CVE-2021-41591 · published 5 years ago
Summary
ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.
What to do
- Update acinq eclair to version 0.6.3 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| acinq | eclair |
< 0.6.3 cpe:2.3:a:acinq:eclair:*:*:*:*:*:*:*:* |
Original advisory text
ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.
ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.
References
- https://github.com/ACINQ/eclair/pull/1985 Patch Third Party Advisory
- https://bitcoinmagazine.com/technical/good-griefing-a-lingering-vulnerability-on... Press/Media Coverage
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.html Mailing List Vendor Advisory
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003257.ht... Exploit Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-770Allocation of Resources Without Limits
Timeline
Published4 Oct 2021
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-41591 · NVD
Track software like this
Free during beta