CyberRota Analysis
AI-GeneratedZebra (zebrad) versions prior to 6.2.1 are susceptible to an asymmetric resource consumption vulnerability that enables unauthenticated attackers to disrupt block verification by inundating the verification queue with invalid transactions. This can lead to significant delays in processing, allowing attackers to stall nodes and prevent them from keeping up with the blockchain. Organizations utilizing Zebra should prioritize patching to mitigate the risk of service disruption and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee transactions carrying zero-filled Orchard and Ironwood proofs, causing nodes to fall behind the chain tip.