Multiple Denial of Service Vulnerabilities in Zebra Before 7.0.0

• •Five DoS vulnerabilities identified in Zebra software versions before 7.0.0.
• •Vulnerabilities include issues with script verification, mempool checks, and checkpoint sync.
• •No active exploitation reported, but immediate patching is recommended.

A series of denial of service (DoS) vulnerabilities have been identified in various versions of Zebra software prior to version 7.0.0. These vulnerabilities affect versions 1.0.0-beta.46 through 6.4.0. The issues include unscored script verification failures, mempool coinbase maturity checks, cancelled verifier rewinds, forged checkpoint block bodies, and quadratic sighash computations. Each vulnerability is classified under different CWEs, indicating improper handling of exceptions and inefficient algorithmic complexity. The vulnerabilities could potentially allow attackers to disrupt service availability. As of now, there are no reports of in the wild, but the vulnerabilities are disclosed and require attention. Organizations using affected versions are advised to prioritize patching to mitigate risks.