CVE-2020-8807: Electriccoin Zcashd

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

In Electric Coin Company Zcashd before 2.1.1-1, the time offset between messages could be leveraged to obtain sensitive information about the relationship between a suspected victim's address and an IP address, aka a timing side channel.

Affected products

• Electriccoin Zcashd: before 2.1.1 (fixed in 2.1.1)

Published 2021-02-05. Last modified 2026-06-17.