Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-vjj6-5m9f-wqjw: NULL Pointer Dereference in HyperLedger Fabric

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader’. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.

ghsa
#vulnerability#git#perl

Package

gomod github.com/hyperledger/fabric (Go )

Affected versions

>= 2.3.0, < 2.3.3

< 2.2.4

Patched versions

2.3.3

2.2.4

ghsa: Latest News

GHSA-prpj-rchp-9j5h: OpenBao allows cancellation of root rekey and recovery rekey operations without authentication