Threats tagged 'ghsa-cwcw-qfgm-5r6m'

Zebra versions from 2.3.0 up to but not including 7.0.0 have a denial of service vulnerability. This flaw allows unauthenticated peers to bypass misbehavior scoring by submitting transactions or blocks containing invalid transparent scripts. Exploitation can lead to mempool flooding with script-failing transactions or delivery of forged v5 block bodies with altered scriptSig bytes, causing CPU exhaustion and repeated stalling of block synchronization.