zebrad vulnerabilities (crates.io)
27 vulnerabilities.
-
zebradcrates.io Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness 9.3 Critical -
zebradcrates.io ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book 7.5 High -
zebradcrates.io ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention 5.3 Medium -
zebradcrates.io ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip 6.5 Medium -
zebradcrates.io ZEBRA: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection 5.9 Medium -
zebradcrates.io ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks 6.9 Medium -
zebradcrates.io ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block 5.3 Medium -
zebradcrates.io ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser 9.3 Critical -
zebradcrates.io ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache 8.7 High -
zebradcrates.io Zebra has pre-handshake buffer capacity reservation based on attacker-claimed body length 3.7 Low -
zebradcrates.io ZEBRA: Mempool transaction admission denial via single-peer inbound queue saturation 5.3 Medium -
zebradcrates.io Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC 7.1 High -
zebradcrates.io Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length 6.3 Medium -
zebradcrates.io ZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplate 6.5 Medium -
zebradcrates.io Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output 8.3 High -
zebradcrates.io ZEBRA: Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoning 8.7 High -
zebradcrates.io Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling 8.3 High -
zebradcrates.io ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer 9.3 Critical -
zebradcrates.io ZEBRA: Allocation Amplification in Inbound Network Deserializers 5.3 Medium -
zebradcrates.io ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops 9.2 Critical -
zebradcrates.io ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling 9.3 Critical -
zebradcrates.io ZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients 6.9 Medium -
zebradcrates.io ZEBRA: rk Identity Point Panic in Transaction Verification 9.2 Critical -
zebradcrates.io Zebra: addr/addrv2 Deserialization Resource Exhaustion 6.3 Medium -
zebradcrates.io Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks 7.2 High -
zebradcrates.io Zebra has a Consensus Failure due to Improper Verification of V5 Transactions 8.4 High -
zebradcrates.io Zebra node crash — V5 transaction hash panic (P2P reachable) 9.2 Critical