Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vjj6-5m9f-wqjw

Опубликовано: 25 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

NULL Pointer Dereference in HyperLedger Fabric

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.

Пакеты

Наименование

github.com/hyperledger/fabric

go
Затронутые версииВерсия исправления

>= 2.3.0, < 2.3.3

2.3.3

Наименование

github.com/hyperledger/fabric

go
Затронутые версииВерсия исправления

< 2.2.4

2.2.4

EPSS

Процентиль: 67%
0.00545
Низкий

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 7.5
nvd
около 4 лет назад

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.

EPSS

Процентиль: 67%
0.00545
Низкий

7.5 High

CVSS3

Дефекты

CWE-476