9.8

CVE-2022-44797: btcd_project btcd

Modified
AliasesUBUNTU-CVE-2022-44797GHSA-2chg-86hq-7w38GO-2022-1098
Published 07-11-2022Last modified 01-05-2025

Vulnerability summary

CVE-2022-44797 is a critical (CVSS 9.8) vulnerability in btcd_project btcd. EPSS estimates a 1.30% chance of exploitation in the next 30 days, higher than 70.4% of scored vulnerabilities. 1 public exploit is recorded.

Priority
Prioritisepublic exploit

Public exploit (GitHub, Date unknown)

Source freshness unavailable

How is this decided?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
1.30%
0%100%
Low · +0.03 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1github

Timeline

  1. 07-11-2022
    PublishedVulnerability first disclosed.
  2. 01-05-2025
    Last modifiedVulnerability information updated.

Description

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

1.30%

Chance of exploitation in the next 30 days

Percentile

70%

Versus all other CVEs

30-day change

Increase +0.03 pp

From 1.28% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found
  • githubUnverified

    Lnd

    Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Btcd_project1 product
Github.com/btcsuite1 product
  • btcd< 0.23.2
Github.com/lightningnetwork1 product
  • lnd< 0.15.2-beta
Ubuntu1 product
  • golang-github-btcsuite-btcd-btcecAll versions (No fix recorded)

4 vendors · 4 products

References

12 links
Show all 12 references