Описание
A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.
Ссылки
- PatchThird Party Advisory
- ExploitVendor Advisory
- PatchThird Party Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:linuxfoundation:fabric:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:fabric:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:fabric:2.1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.00545
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-476
Связанные уязвимости
EPSS
Процентиль: 67%
0.00545
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-476