Threats tagged 'ghsa-wgc2-xcwr-9pcw'

Zebra versions prior to 7.0.0 have an inefficient algorithmic complexity vulnerability that allows unauthenticated peers to exhaust verification threads by submitting transactions with many transparent inputs. This causes quadratic digest recomputation under ZIP-244 or ZIP-243, stalling Rayon-backed block verification for minutes and resulting in a denial of service.