7.5
CVE-2021-43667
- EPSS 0.55%
- Veröffentlicht 18.11.2021 16:15:09
- Zuletzt bearbeitet 21.11.2024 06:29:34
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linuxfoundation ≫ Fabric Version1.4.0
Linuxfoundation ≫ Fabric Version2.0.0
Linuxfoundation ≫ Fabric Version2.1.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.55% | 0.667 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.