CVE-2026-34202 in ZcashFoundation zebra
요약 (영어)
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-chain version 6.0.1, a vulnerability in Zebra's transaction processing logic allows a remote, unauthenticated attacker to cause a Zebra node to panic (crash). This is triggered by sending a specially crafted V5 transaction that passes initial deserialization but fails during transaction ID calculation. This issue has been patched in zebrad version 4.3.0 and zebra-chain version 6.0.1.
책임이 있는
GitHub_M
예약하다
2026. 03. 26.
공개
2026. 03. 31.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354402 | ZcashFoundation zebra/zebra-chain Transaction ID 서비스 거부 | 1336 | 정의되지 않음 | 공식 수정 | CVE-2026-34202 |