CVE-2019-11636

2019-05-0117:29:00

Google

osv.dev

AI Score

Confidence

Low

EPSS

0.003

Percentile

71.7%

JSON

Zcash 2.x allows an inexpensive approach to “fill all transactions of all blocks” and “prevent any real transaction from occurring” via a “Sapling Wood-Chipper” attack.

References

github.com/zcash/zcash/issues/3955

saplingwoodchipper.github.io

twitter.com/dukeleto/status/1120467430118232066