https://vulnerability.circl.lu/sightings/feed 2026-08-28T05:42:55.239581+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2d1e7b27-58b3-43e9-adfb-dffbc0a75be0/export 2026-08-28T05:42:55.250394+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2d1e7b27-58b3-43e9-adfb-dffbc0a75be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-3WHF-VGF2-9W6G", "type": "seen", "source": "https://gist.github.com/alon710/124f7bf887e5079fb15a66958a9543ef", "content": "# GHSA-3WHF-VGF2-9W6G: GHSA-3WHF-VGF2-9W6G: Denial of Service via Unbounded Recursion and State Panic in zaino-state\n\n> **CVSS Score:** 5.1\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/GHSA-3WHF-VGF2-9W6G\n\n## Summary\nThe zaino-state crate contains two critical flaws in its block reorganization and state synchronization logic. An unbounded recursive async function handling block reorganization fails to validate cyclic relationships, enabling network peers to cause infinite loops that exhaust CPU and memory resources. Furthermore, a logical pruning error during non-finalized block cache trimming can purge all cached blocks, triggering an immediate panic and crash of the daemon.\n\n## TL;DR\nzaino-state is vulnerable to unconstrained recursive block reorganization and an unhandled panic during state cache pruning, causing denial of service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network\n- **CVSS v4 Score**: 5.1\n- **Impact**: Denial of Service (CPU & Memory Exhaustion, Daemon Crash)\n- **Exploit Status**: PoC Mechanics Documented\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- zaino-state indexer nodes\n- **zaino-state**: >= 0.0.0, < 0.4.1 (Fixed in: `0.4.1`)\n\n## Mitigation\n\n- Upgrade to zaino-state v0.4.1 or higher.\n- Restrict validator peer connections to trusted hosts to block malicious header delivery.\n- Configure system-level resource constraints (CPU quotas) on the indexer processes.\n\n**Remediation Steps:**\n1. Identify and update Cargo.toml dependencies to set the 'zaino-state' package to version '^0.4.1'.\n2. Execute 'cargo update -p zaino-state' to sync your lockfile with the patched release.\n3. Deploy the updated indexer binary to production systems using a restart supervisor (e.g. systemd or supervisord) configured to auto-restart upon unexpected termination.\n\n## References\n\n- [GitHub Advisory Page for GHSA-3WHF-VGF2-9W6G](https://github.com/advisories/GHSA-3WHF-VGF2-9W6G)\n- [Advisory Source](https://github.com/zingolabs/zaino/security/advisories/GHSA-3whf-vgf2-9w6g)\n- [Fix Pull Request #1172](https://github.com/zingolabs/zaino/pull/1172)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-3WHF-VGF2-9W6G) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T20:31:22.067910Z"} 2026-07-31T20:31:22.067910+00:00