What is GHSA-vjj6-5m9f-wqjw?

GHSA-vjj6-5m9f-wqjw is a security advisory published by GitHub Security Advisories with High severity. NULL Pointer Dereference in HyperLedger Fabric

Which CVE IDs does GHSA-vjj6-5m9f-wqjw cover?

GHSA-vjj6-5m9f-wqjw covers the following CVE IDs: CVE-2021-43667. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vjj6-5m9f-wqjw?

GHSA-vjj6-5m9f-wqjw has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-vjj6-5m9f-wqjw?

GHSA-vjj6-5m9f-wqjw affects 2 products, including: go/github.com/hyperledger/fabric:\u003e= 2.3.0, \u003c 2.3.3; go/github.com/hyperledger/fabric:\u003c 2.2.4.

GHSA-vjj6-5m9f-wqjwHighCVSS 7.5

NULL Pointer Dereference in HyperLedger Fabric

Vendor

GitHub Security Advisories

Published

May 25, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2021-43667 →

📋 Description

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.

🎯 Affected products2

go/github.com/hyperledger/fabric:>= 2.3.0, < 2.3.3
go/github.com/hyperledger/fabric:< 2.2.4

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-43667
https://github.com/hyperledger/fabric/pull/2838/commits/ebf94b10ecc86d3a91619b98befc52277b1e3474
https://github.com/hyperledger/fabric/pull/2844
https://jira.hyperledger.org/browse/FAB-18529
https://github.com/advisories/GHSA-vjj6-5m9f-wqjw