CyberRota Analysis
AI-GeneratedZebra's block synchronization process prior to version 6.3.0 is vulnerable due to its reliance on unvalidated coinbase scriptSig data, allowing a malicious peer to manipulate block height information. This can lead to a denial-of-service condition by delaying a node's ability to discover the latest blocks, potentially impacting network performance and reliability. Organizations utilizing affected versions of Zebra should prioritize patching to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that appear too far behind the tip before consensus validation, without penalizing the supplying peer. Because V5 transaction IDs exclude the scriptSig, a malicious peer can repeatedly serve a canonical block whose coinbase claims height 1 while keeping the requested hash, delaying the node's discovery of the newest block.