Skip to content
OpenAdvisories
High · 7.5 CVE-2021-43667 EUVD-2022-5370GHSA-vjj6-5m9f-wqjw

NULL Pointer Dereference in HyperLedger Fabric

Published Nov 18, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/hyperledger/fabric >= 2.3.0, < 2.3.3 2.3.3 GHSA-vjj6-5m9f-wqjw
Go github.com/hyperledger/fabric < 2.2.4 2.2.4 GHSA-vjj6-5m9f-wqjw

References