PT-2019-14876
CVE-2019-16930
·
Published
2019-09-28
·
Updated
2019-10-04
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Zcash versions prior to 2.0.7-3
Description
The issue allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party.
Recommendations
For versions prior to 2.0.7-3, update to version 2.0.7-3 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾