Vulnerabilities > CVE-2019-16930 - Improper Handling of Exceptional Conditions vulnerability in Z.Cash Zcash

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

z-cash

CWE-755

NVD

Published: 2019-09-28

Updated: 2019-10-04

Summary

Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party.

Vulnerable Configurations

Part	Description	Count
Application	Z.Cash Z.Cash Zcash 0.11.2.Z0 Z.Cash Zcash 0.11.2.Z1 Z.Cash Zcash 0.11.2.Z2 Z.Cash Zcash 0.11.2.Z3 Z.Cash Zcash 0.11.2.Z4 Z.Cash Zcash 0.11.2.Z5 Z.Cash Zcash 0.11.2.Z6 Z.Cash Zcash 0.11.2.Z7 Z.Cash Zcash 0.11.2.Z8 Z.Cash Zcash 0.11.2.Z9 Z.Cash Zcash 1.0.0 Z.Cash Zcash 1.0.1 Z.Cash Zcash 1.0.2 Z.Cash Zcash 1.0.3 Z.Cash Zcash 1.0.4 Z.Cash Zcash 1.0.5 Z.Cash Zcash 1.0.6 Z.Cash Zcash 1.0.7 Z.Cash Zcash 1.0.7-1 Z.Cash Zcash 1.0.8 Z.Cash Zcash 1.0.8-1 Z.Cash Zcash 1.0.9 Z.Cash Zcash 1.0.10 Z.Cash Zcash 1.0.10-1 Z.Cash Zcash 1.0.11 Z.Cash Zcash 1.0.12 Z.Cash Zcash 1.0.13 Z.Cash Zcash 1.0.14 Z.Cash Zcash 1.0.15 Z.Cash Zcash 1.1.0 Z.Cash Zcash 1.1.1 Z.Cash Zcash 1.1.2 Z.Cash Zcash 2.0.0 Z.Cash Zcash 2.0.1 Z.Cash Zcash 2.0.2 Z.Cash Zcash 2.0.3 Z.Cash Zcash 2.0.4 Z.Cash Zcash 2.0.5 Z.Cash Zcash 2.0.5-1 Z.Cash Zcash 2.0.5-2 Z.Cash Zcash 2.0.6 Z.Cash Zcash 2.0.7 Z.Cash Zcash 2.0.7-2	67

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References