Zebra/Zcash Vulnerability Fixes: DoS, Consensus Split, Memory Leak

Vulnerability Overview Zebra version 4.5.0 fixes several critical security issues and adds support for shielded address mining. Impact Scope Denial of Service (DoS): Sending specific messages (such as , reservation, , etc.) can cause node crashes or resource exhaustion. Memory Leaks: In certain scenarios, nodes may accumulate large amounts of unreleased memory, leading to performance degradation or crashes. Consensus Split: Constructing special transactions or blocks can cause consensus splits among nodes in the network. Other Issues: Including rejection of non-ASCII values, error handling for malformed Sapling receivers, prevention of poisoning during synchronized restarts, etc. Remediation 1. Remove rejected block hashes from : Prevents duplicate deliveries from being short-circuited as duplicates. 2. Limit reservation: Prevents forcing large memory allocations before reading any element bytes. 3. Limit : Prevents forcing large memory pre-allocation after handshake. 4. Reject non-ASCII values: Prevents potential issues in RPC. 5. Return errors for malformed Sapling receivers: Prevents crashes caused by processing erroneous data. 6. Prevent poisoning during synchronized restarts: Avoids sending consensus-invalid blocks from the peer inventory registry. 7. Avoid panic in address balance calculations: Prevents crediting transparent debits on the same address spend chain before applying transparent debits. 8. Reject duplicate shielded transactions: Prevents triggering the assertion in deep defense. 9. Limit pre-handshake message body length: Prevents peers from exhausting validation capacity after handshake completion. 10. Fix sigop under-counting: Prevents consensus splits caused by routing through FFI to match . 11. Limit inbound mempool download queue: Prevents a single peer from monopolizing validation capacity. 12. Normalize IPv4-mapped addresses: Prevents evasion of scoring by alternating between IPv4 and IPv4-mapped-IPv6 formats. 13. Drain entries in mempool downloader: Prevents accumulation of unreserved entries when the process runs out of memory. 14. Pop non-finalized tip when popping Sapling/Orchard subtree: Prevents potential issues caused by popping non-finalized tips. Other Improvements TCP Congestion Window Reset on Linux: Significantly reduces single-peer block propagation throughput by enabling . Support for ZIP-213 (Shielded Coinbase): Adds support for shielded address mining. Changes Renaming : Use in configuration instead. Fixes Avoid panic in : Prevents crashes caused by threshold misbehavior updates by protecting the cache instead of unwrapping. Propagate transaction-level value balance errors: Propagates errors from instead of silently discarding them. Resolve Rust 1.97 beta cleanup limits: Resolves cleanup limit issues in Rust 1.97 beta. Contributors Thanks to everyone who contributed to this release. --- Code Blocks No specific POC code or exploit code is included in this page.

Goal Reached Thanks to every supporter — we hit 100%!

Zebra/Zcash Vulnerability Fixes: DoS, Consensus Split, Memory Leak

More from this source