Vendor
Denial of Service Vulnerability in Zebra
1 TTP 2 CVEsZebra versions prior to 6.0.0 are vulnerable to an unauthenticated denial-of-service attack via the submission of non-standard high-sigop P2SH transactions that exhaust system resources.
Consensus Divergence Vulnerability in Zebra zebrad and zebra-script
1 TTP 1 CVEAn incorrect signature operation count in Zebra zebrad 4.5.0 and zebra-script 7.0.0 causes consensus divergence when processing specific P2SH multisig transactions, potentially leading to a denial-of-service condition for affected nodes.
Zebra Block Suppression Vulnerability (CVE-2026-52736) via P2P Body Poisoning
2 TTPsA remote unauthenticated attacker can exploit CVE-2026-52736 in Zebra's `zebrad` node (versions up to and including `v4.4.1`) to permanently stall a targeted blockchain node by poisoning its sent-hash cache, leading to a denial of service.
Zebra Node Denial-of-Service via IPv4-Mapped Mempool Misbehavior Panic (CVE-2026-52829)
1 TTPA remote unauthenticated peer can exploit an address normalization mismatch in Zebra's address book when connecting via IPv4 to a dual-stack IPv6 listener on a Linux host, by then advertising an invalid mempool transaction, which triggers a deterministic assertion panic after a 30-second delay, causing the `zebrad` process to terminate, leading to persistent denial of service.
Zebra Block Discovery Denial-of-Service via Gossip Queue Saturation and Syncer Poisoning
2 rules 1 TTP 1 CVEA denial-of-service vulnerability exists in Zebra's block discovery pipeline, allowing an unauthenticated remote attacker to permanently halt all new block discovery on a targeted node by exploiting weaknesses in the gossip, syncer, and download subsystems.