CyberRota Analysis
AI-GeneratedZebra versions prior to 6.4.0 are susceptible to an uncontrolled resource consumption vulnerability that enables unauthenticated attackers to disrupt proof verification by submitting forged block bodies with valid header hashes. This can lead to significant resource waste during the verification process, causing sync delays of up to 67 seconds. Organizations utilizing Zebra should prioritize addressing this vulnerability to maintain system performance and integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies with valid header hashes. Attackers can flip authorizing-only bytes such as a coinbase scriptSig, wasting Sapling, Orchard, and Ironwood proof verification without penalty and stalling sync for 67 seconds.