https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T06:59:27.667313+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109363 CVE-2026-109363 — Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction 2026-10-20T06:59:27.672362+00:00

Affected: ZcashFoundation zebra

ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-serialization of the Orchard bundle as infallible, so the resulting error trips an expect that aborts zebrad. Unauthenticated peers can send a single pre-handshake tx message to crash the node, and can repeat this after each restart.