hyperledger

9 results · Clear filters · Feed

• High 8.7
  CVE-2025-30147

  ALTBN128_ADD, ALTBN128_MUL, ALTBN128_PAIRING precompile functions do not check if points are on curve

  Besu Native contains scripts and tooling that is used to build and package the native libraries used by the Ethereum client Hyperledger Besu. Besu 24.7.1 through 25.2.2, corresponding to besu-native versions 0.9.0 through 1.2.1, have a potential consensus bug…

  hyperledger besu-native
  May 7, 2025
• High 7.1
  CVE-2023-46132

  Crosslinking transaction attack in hyperledger/fabric

  Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" results in a molecule with a chemical formula that is composed of all atoms of the original two molecules. In Fabric…

  hyperledger fabric github.com/hyperledger/fabric Go
  Nov 14, 2023
• High 7.5
  CVE-2022-31006

  Hyperledger Indy DOS vulnerability

  indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client connections allowed by the ledger, leaving the ledger unable …

  hyperledger indy-node indy-node PyPI
  Sep 9, 2022
• High 8.8
  CVE-2022-31020

  Remote code execution in Indy's NODE_UPGRADE transaction

  Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the `pool-upgrade` request handler in Indy-Node allows an improperly authenticated attacker to remotely execute code on nodes withi…

  hyperledger indy-node indy-node PyPI
  Sep 6, 2022
• High 7.0
  CVE-2022-36023

  Remote denial of service in Hyperledger Fabric Gateway

  Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the…

  hyperledger fabric github.com/hyperledger/fabric Go
  Aug 18, 2022
• High 7.5
  CVE-2022-31121

  Improper Input Validation in fabric hyperledger

  Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an orderer it may crash the orderer node. A fix has been added in commit 0f1835949 which checks for missing co…

  hyperledger fabric github.com/hyperledger/fabric Go
  Jul 7, 2022
• High 7.5
  CVE-2021-41272

  SHL, SHR, and SAR operations trigger native exception at key values in besu

  Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the introduction of a signed type coercion error in values that represent negative values for 32 bit signed …

  hyperledger besu
  Dec 13, 2021
• High 7.5
  CVE-2020-11093

  Authorization bypass in Hyperledger Indy

  Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there is lack of signature verification on a specific transaction which enables an attacker to make certai…

  hyperledger indy-node indy-node PyPI
  Dec 24, 2020
• High 7.5
  CVE-2020-11090

  Uncontrolled Resource Consumption in Indy Node

  In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view change…

  hyperledger indy-node indy-node PyPI
  Jun 11, 2020