Zebra Zebrad 6.4.0 Before 7.0.0 Denial Of Service Via Mempool Coinbase Maturity Check

Back www.vulncheck.com

Zebra Zebrad 6.4.0 Before 7.0.0 Denial Of Service Via Mempool Coinbase Maturity Check

www.vulncheck.com • November 8, 2026

Share: View original

Zebra zebrad 6.4.0 before 7.0.0 Denial of Service via Mempool Coinbase-Maturity Check

zebra >= 6.4.0, = 6.4.0, < 7.0.0

CWE-407 Inefficient Algorithmic Complexity

GitHub Security Advisory (GHSA-7jp4-mq53-4cvq)

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Denial of Service Vulnerabilities in Zebra Before 7.0.0 A series of denial of service (DoS) vulnerabilities have been identified in various versions of Zebra software prior to version 7.0.0. These vulnerabilities affect versions 1.0.0-beta.46 through 6.4.0. The issues include unscored script verification failures, mempool coinbase maturity checks, cancelled verifier rewinds, forged checkpoint block bodies, and quadratic sighash computations. Each vulnerability is classified under different CWEs, indicating improper handling of exceptions and inefficient algorithmic complexity. The vulnerabilities could potentially allow attackers to disrupt service availability. As of now, there are no reports of in the wild, but the vulnerabilities are disclosed and require attention. Organizations using affected versions are advised to prioritize patching to mitigate risks. 45

Extracted Entities

Attack Types (1)

Denial of Service

CWE Weaknesses (1)

CWE-407 - Inefficient Algorithmic Complexity