A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method forwardToLeader. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fabric | Linuxfoundation | 1.4.0 (including) | 1.4.0 (including) |
| Fabric | Linuxfoundation | 2.0.0 (including) | 2.0.0 (including) |
| Fabric | Linuxfoundation | 2.1.0 (including) | 2.1.0 (including) |