7.5

CVE-2021-43667

Exploit
A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linuxfoundation ≫ Fabric Version 1.4.0
Linuxfoundation ≫ Fabric Version 2.0.0
Linuxfoundation ≫ Fabric Version 2.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.29% 0.665
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://github.com/hyperledger/fabric/pull/2844
Patch
Third Party Advisory
https://jira.hyperledger.org/browse/FAB-18529
Vendor Advisory
Exploit