Описание
Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party.
Ссылки
- MitigationThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- Vendor Advisory
- MitigationThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.7-3 (исключая)
cpe:2.3:a:z.cash:zcash:*:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00356
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-755
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party.
EPSS
Процентиль: 57%
0.00356
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-755