Threats tagged 'ghsa-5hx4-99cr-cchc'

Zebra zebrad versions prior to 7.0.0 contain a denial of service vulnerability. A malicious peer can exploit this flaw by cancelling the verifier rewind after a failed commit, which stalls checkpoint synchronization. This allows attackers to serve forged blocks with altered authorizing data combined with a restart-triggering block, causing the verifier to reject legitimate blocks until the service is restarted.