CVE-2021-43667

Source
https://cve.org/CVERecord?id=CVE-2021-43667
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-43667.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-43667
Aliases
Published
2021-11-18T16:15:09.073Z
Modified
2026-07-09T01:07:57.899858Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.

References

Affected packages

Git / github.com/hyperledger/fabric

Affected ranges

Type
GIT
Repo
https://github.com/hyperledger/fabric
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:linuxfoundation:fabric:1.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:linuxfoundation:fabric:2.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:linuxfoundation:fabric:2.1.0:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "1.4.0"
        },
        {
            "last_affected": "1.4.0"
        },
        {
            "introduced": "2.0.0"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "introduced": "2.1.0"
        },
        {
            "last_affected": "2.1.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*
1.4.0
2.*
2.0.0
2.1.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-43667.json"