Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-104419

Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlocks Hashes

Description

Zebra (zebrad) 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a syncing node so that honest peers get banned, eroding its peer set and raising eclipse risk.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZcashFoundation zebra

Default version status: unaffected

  • 0 to < 6.3.0affected
  • 6.3.0unaffected
pkg:cargo/zebrad

References