PT-2026-110782 · Zebra · Zebra
CVSS v4.0
6.3
Medium
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Zebra versions prior to 6.4.0
Description
An uncontrolled resource consumption issue allows unauthenticated peers to force full proof verification by serving forged block bodies that possess valid header hashes. By flipping authorizing-only bytes, such as a
coinbase scriptSig, attackers can waste Sapling, Orchard, and Ironwood proof verification processes without penalty, resulting in a synchronization stall of 67 seconds.Recommendations
Update to version 6.4.0 or later.
Exploit
Fix
Insufficient Verification of Data Authenticity
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Zebra