Approved changes feed: RSS · Atom
cpe:2.3:a:zfnd:zebra:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Zfnd (86acb11b-50a5-5ca1-a20b-124d696a668f) |
|---|---|
| Product | Zebra (4a141369-ef78-52c3-949a-7a121abf89b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-109363 |
vulnerable | 2026-11-03 10:17:40.072310 |
Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction
HIGH (7.5)
ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-serialization of the Orchard bundle as infallible, so the resulting error trips an expect that aborts zebrad. Unauthenticated peers can send a single pre-handshake tx message to crash the node, and can repeat this after each restart.
Published: 2026-10-12T16:05:41.576Z
Updated: 2026-10-13T16:22:00.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-109365 |
vulnerable | 2026-11-03 10:17:39.740299 |
Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies
LOW (3.7)
Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies with valid header hashes. Attackers can flip authorizing-only bytes such as a coinbase scriptSig, wasting Sapling, Orchard, and Ironwood proof verification without penalty and stalling sync for 67 seconds.
Published: 2026-10-12T16:05:42.923Z
Updated: 2026-10-13T17:28:36.728Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.