Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-104431 | 7.5 | Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchronous script verification. Attackers can send non-standard high-sigop | 2026-10-02 17:59:09 | 2026-10-02 12:17:13 |
| CVE-2026-104430 | 7.5 | Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. | 2026-10-02 17:59:09 | 2026-10-02 12:17:13 |
| CVE-2026-104429 | 5.3 | Zebra (zebrad) 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push ma | 2026-10-02 17:59:09 | 2026-10-02 12:17:13 |
| CVE-2026-104428 | 5.3 | The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for a side-chain block because the block's -1 confirmations sentinel is converted to u32 with .expect(), aborting the process. Remote | 2026-10-02 17:59:09 | 2026-10-02 12:17:13 |
| CVE-2026-104426 | 5.9 | Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remaining_transaction_value that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool wi | 2026-10-02 17:59:09 | 2026-10-02 12:17:12 |
| CVE-2026-104425 | 5.3 | ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid Orchard proofs without being misbehavior-scored. Attackers can repeated | 2026-10-02 17:59:09 | 2026-10-02 12:17:12 |
| CVE-2026-104424 | 3.7 | Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempoo | 2026-10-02 17:59:09 | 2026-10-02 12:17:12 |
| CVE-2026-104423 | 7.5 | Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unpriorit | 2026-10-02 17:59:09 | 2026-10-02 12:17:12 |
| CVE-2026-104421 | 5.3 | Zebra before 6.2.1 contains an incomplete cleanup vulnerability that allows unauthenticated peers to block downloading of valid blocks by leaving rejected hashes in SentHashes. Attackers can send a contextually invalid block sharing an honest block's | 2026-10-02 17:59:09 | 2026-10-02 12:17:12 |
| CVE-2026-104420 | 5.3 | Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup step wrongly downcasts RouterError to VerifyBlockError and discards th | 2026-10-02 17:59:09 | 2026-10-02 12:17:11 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: