IP Address Discovery Vulnerability in Zcashd Prior to 2.0.7-3

IP Address Discovery Vulnerability in Zcashd Prior to 2.0.7-3

CVE-2019-16930 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party.

Learn more about our Web Application Penetration Testing UK.