Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Electriccoin Subscribe
Filtered by product Zcashd
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-8806 1 Electriccoin 1 Zcashd 2021-02-08 5.0 MEDIUM 7.5 HIGH
Electric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and double spending. A valid chain could be incorrectly rejected because timestamp requirements on block headers were not properly enforced.
CVE-2020-8807 1 Electriccoin 1 Zcashd 2021-02-08 5.0 MEDIUM 5.3 MEDIUM
In Electric Coin Company Zcashd before 2.1.1-1, the time offset between messages could be leveraged to obtain sensitive information about the relationship between a suspected victim's address and an IP address, aka a timing side channel.