Skip to content
OpenAdvisories

Package · crates.io

zebra-chain

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.2

    ZEBRA: rk Identity Point Panic in Transaction Verification

    ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-chain version 6.0.2, Orchard transactions contain a rk field which is a randomized validating key and also an elliptic curve point. The Zcash specification allows…

  • Critical 9.2

    Zebra node crash — V5 transaction hash panic (P2P reachable)

    ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-chain version 6.0.1, a vulnerability in Zebra's transaction processing logic allows a remote, unauthenticated attacker to cause a Zebra node to panic (crash). This is trig…