cve.bz

CVE-2021-43667

7.5 highEPSS 1.3%

High (7.5) in linuxfoundation fabric. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in github.com/hyperledger/fabric 2.2.4, 2.3.3.

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE
CWE-476
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-vjj6-5m9f-wqjwGogithub.com/hyperledger/fabric>=2.3.0 <2.3.32.3.3
GHSA-vjj6-5m9f-wqjwGogithub.com/hyperledger/fabric<2.2.42.2.4

References

Check your stackJSON