NRDAX-T0192 - Oversized Transaction Block-Fill

gossip_abuse · active · first seen 2024-01-01

provenance: Reproduced in NullRabbit's attack-reproduction pipeline

mechanism

CVE-2019-11636 (Zcash 'Sapling Wood-Chipper'): Zcash 2.x raised the max transaction size from 100 KB to the full block size after Sapling, letting an attacker cheaply build block-filling shielded txs

instances (1)

chain	primitive	fidelity	origin	reproducer (bundle)	source
zcash	zcash_sapling_woodchip_tx_flood	lab	reverse-engineered-cve	zcash_sapling_woodchip_tx_flood	https://nvd.nist.gov/vuln/detail/CVE-2019-11636 ↗

references

cve: CVE-2024-8421

related (gossip_abuse)

NRDAX-T0001 - Addr Message Counter Overflow Crash active NRDAX-T0050 - DHT Sybil Content Censorship active NRDAX-T0120 - Integer-Overflow Panic Control Message active NRDAX-T0188 - Oversized Control-Message Array CPU Burn active NRDAX-T0199 - Peer-Record Flood OOM active NRDAX-T0295 - Sync-State Poisoning Via Fake Blocks active NRDAX-T0312 - Tx-Relay Throughput Jamming active NRDAX-T0326 - Unbounded Peer-Slot Sybil active

cite

https://nrdax.com/techniques/NRDAX-T0192

plain

NRDAX Registry. Technique NRDAX-T0192.

bibtex

@misc{nrdax_NRDAX_T0192,
  title = {Oversized Transaction Block-Fill (NRDAX-T0192)},
  howpublished = {NRDAX Registry},
  url = {https://nrdax.com/techniques/NRDAX-T0192},
}

json (csl)

{
  "id": "nrdax-NRDAX-T0192",
  "type": "dataset",
  "title": "Oversized Transaction Block-Fill (NRDAX-T0192)",
  "URL": "https://nrdax.com/techniques/NRDAX-T0192",
  "publisher": "NRDAX Registry"
}