Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2021-41592: Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.
CVE-2021-41592 · published 5 years ago
Summary
Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| elementsproject | c-lightning |
<= 0.10.1 cpe:2.3:a:elementsproject:c-lightning:*:*:*:*:*:*:*:* |
Original advisory text
Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.
Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.
References
- https://bitcoinmagazine.com/technical/good-griefing-a-lingering-vulnerability-on... Press/Media Coverage Third Party Advisory
- https://github.com/ElementsProject/lightning Third Party Advisory
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.html Mailing List Vendor Advisory
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003257.ht... Mailing List Mitigation Vendor Advisory
- https://lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003264.ht... Mailing List Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-770Allocation of Resources Without Limits
Timeline
Published4 Oct 2021
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-41592 · NVD
Track software like this
Free during beta