Description (CNA)
Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list to restore access for banned peers.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ZcashFoundation / zebra | affected 2.3.0 before 6.4.0; unaffected 6.4.0 |
CWE
CWE-693
References
- https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-jhpp-8h75-7pv5
- https://www.vulncheck.com/advisories/zebra-2.3.0-before-6.4.0-peer-ban-bypass-via-exact-ip-keying
ADP enrichment
No English description supplied.
No references supplied.