PT-2026-104242 · Zebra · Zebra
CVSS v4.0
8.7
عالية
| المتجه | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Zebra versions prior to 6.0.0
Description
A denial of service issue allows unauthenticated peers to stall Tokio workers by submitting mempool transactions that require expensive synchronous script verification. Attackers can send non-standard high-sigop P2SH transactions that reach the
is valid() function within CachedFfiTransaction before standardness checks are performed. This process saturates the verifier buffer, rendering the node unresponsive.Recommendations
Update Zebra to version 6.0.0 or later.
استغلال
إصلاح
DoS
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Zebra