CyberRota Analysis
AI-GeneratedZebra versions prior to 6.4.0 are vulnerable to an improper integrity validation issue in the inbound gossip download path, allowing unauthenticated peers to manipulate block validation. This vulnerability can lead to the dropping of new blocks, hindering consensus and delaying tip discovery for mining operations. Organizations utilizing Zebra for blockchain operations should prioritize upgrading to mitigate potential disruptions in their mining processes.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks without penalty. Attackers can serve a real block with a coinbase scriptSig rewritten to height 1, which keeps the ZIP-244 block hash, triggering a behind-tip drop before consensus validation and delaying tip discovery for mining backends.