一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月2日

CVE-2026-104425 [MEDIUM] – ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allow

未分类
📑 文章目录

ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid Orchard proofs without being misbehavior-scored. Attackers can repeatedly push invalid proofs into the shared halo2 batch verifier, forcing honest block proofs onto the slow individual-verification path and slowing block processing roughly sevenfold.