Threats tagged 'ghsa-7gc8-jc34-45g3'

ZcashFoundation Zebra versions from 4.5.0 up to but not including 7.0.0 have a vulnerability in their protection mechanism that causes honest peers to be banned incorrectly. This occurs because the software scores mempool lock-time rejections at the ban threshold, allowing attackers to broadcast transactions locked until the current block height immediately after each block. As a result, nodes that are lagging can mistakenly ban honest relaying peers for 24 hours or until they restart.