Vulnerabilities

TI-2019-12629 CVE-2019-16930 · GHSA-x2rm-rw73-q2w8

Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that…

LOW 27

Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01636 Published 2019-09-28 No fix listed CWE-755

TI-2019-08706 CVE-2019-11636 · GHSA-p5ww-mxg5-8q8m

Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and…

LOW 37

Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction from occurring" via a "Sapling Wood-Chipper" attack.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0218 Published 2019-05-01 No fix listed CWE-254

TI-2019-05084 CVE-2019-7167 · GHSA-q567-c5xf-8xjf

Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting…

LOW 37

Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02183 Published 2019-03-27 No fix listed CWE-754

Vulnerabilities

Filters

Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that…

Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and…

Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting…