medium5.3
CVE-2026-104429
Zebra (zebrad) 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are …
Impact
Zebra (zebrad) 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportionate share of mempool admission slots, crowding out honest peers' transaction relay.
Affected products
| Product | Affected versions |
|---|---|
| Zebra (Zebrad) 5.0.0 | before 6.0.0-rc.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.