A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method forwardToLeader. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fabric | Linuxfoundation | 1.4.0 (including) | 1.4.0 (including) |
| Fabric | Linuxfoundation | 2.0.0 (including) | 2.0.0 (including) |
| Fabric | Linuxfoundation | 2.1.0 (including) | 2.1.0 (including) |