Lucene search
+L

1 matches found

OSV
OSV
added yesterday2 views

CVE-2026-52732 ZEBRA: Mempool transaction admission denial via single-peer inbound queue saturation

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, one unauthenticated P2P peer can monopolize all 25 MAXINBOUNDCONCURRENCY slots in Zebra's inbound mempool download and verification pipeline. In zebrad/src/components/mempool/downloads.rs, the bounded queue was shared globally withou...

5.3CVSS5.5AI score
SaveExploits0References5
Rows per page
Query Builder