netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-6gr4-52w6-vmqx
GHSA-9gxx-58q6-42p7
This commit is contained in:
advisory-database[bot]
2024-07-05 21:41:56 +00:00
parent e8e087138b
commit 690b35cf8c
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/06/GHSA-6gr4-52w6-vmqx/GHSA-6gr4-52w6-vmqx.json
+2 -2
View File
File diff suppressed because one or more lines are too long
advisories/github-reviewed/2024/06/GHSA-9gxx-58q6-42p7/GHSA-9gxx-58q6-42p7.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9gxx-58q6-42p7",
"modified": "2024-06-21T14:02:37Z",
"modified": "2024-07-05T21:40:07Z",
"published": "2024-06-20T19:18:25Z",
"aliases": [
"CVE-2024-38359"
],
"summary": "Lightning Network Daemon (LND)'s onion processing logic leads to a denial of service",
"details": "### Impact\n\nA parsing vulnerability in lnd's onion processing logic led to a DoS vector due to excessive memory allocation. \n\n### Patches\n\nThe issue was patched in lnd [v0.17.0](https://github.com/lightningnetwork/lnd/releases/tag/v0.17.0-beta). Users should update to a version >= v0.17.0 to be protected. \n\n### References\n\nDetailed blog post: https://morehouse.github.io/lightning/lnd-onion-bomb/\n\nDeveloper discussion: https://delvingbitcoin.org/t/dos-disclosure-lnd-onion-bomb/979",
"details": "### Impact\n\nA parsing vulnerability in lnd's onion processing logic led to a DoS vector due to excessive memory allocation. \n\n### Patches\n\nThe issue was patched in lnd [v0.17.0](https://github.com/lightningnetwork/lnd/releases/tag/v0.17.0-beta). Users should update to a version >= v0.17.0 to be protected. \n\n### References\n\nDetailed blog post: https://morehouse.github.io/lightning/lnd-onion-bomb/\n\nDeveloper discussion: https://delvingbitcoin.org/t/dos-disclosure-lnd-onion-bomb/979",
"severity": [
{
"type": "CVSS_V3",