GHSA-vjj6-5m9f-wqjw
NULL Pointer Dereference in HyperLedger Fabric
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/hyperledger/fabric | >= 2.3.0, < 2.3.3 | 2.3.3 |
| Go | github.com/hyperledger/fabric | < 2.2.4 | 2.2.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.
References
External links from the advisory. They lead to third-party sites.