CVE record · 1 source
CVE-2026-104422
CVSS 7.5The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that…
- Vendor
- Canonical
- Product
- canonical
- CVSS
- 7.5
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that…
The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that appear too far behind the tip before consensus validation, without penalizing the…