Description
A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.0.1, v2.3.0. It can easily break down as many orderers as the attacker wants. This bug can be leveraged by constructing a message whose header is invalid to the interface Order. This bug has been admitted and fixed by the developers of Fabric.
Scores
CVSS v3
7.5
EPSS
0.0047
EPSS Percentile
64.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-444
Status
published
Products (5)
hyperledger/fabric
0 - 2.4.0Go
linuxfoundation/fabric
1.4.0
linuxfoundation/fabric
2.0.0
linuxfoundation/fabric
2.0.1
linuxfoundation/fabric
2.3.0
Published
Nov 18, 2021
Tracked Since
Feb 18, 2026