Remote denial of service in Hyperledger Fabric Gateway
CVE-2022-36023

7HIGH

Key Information:

Vendor

Hyperledger

Status
Fabric
Vendor
CVE Published:
18 August 2022

What is CVE-2022-36023?

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the malformed gateway request and returns an error to the gateway client. There are no known workarounds, users must upgrade to version 2.4.6.

Affected Version(s)

fabric < 2.4.6

References

https://github.com/hyperledger/fabric/security/advisories...
https://github.com/hyperledger/fabric/releases/tag/v2.4.6
https://github.com/hyperledger/fabric/pull/3572

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.