CVE-2021-43667

Name of the Vulnerable Software and Affected Versions: HyperLedger Fabric versions 1.4.0 through 2.1.0

Description: A bug in HyperLedger Fabric allows an attacker to crash any leader node by constructing a message with a nil payload and sending it using the forwardToLeader method. The developers have acknowledged and fixed this issue.

Recommendations: For HyperLedger Fabric version 1.4.0, update to a version that includes the fix for this bug. For HyperLedger Fabric version 2.0.0, update to a version that includes the fix for this bug. For HyperLedger Fabric version 2.1.0, update to a version that includes the fix for this bug. As a temporary workaround, consider restricting the use of the forwardToLeader method until a patch is available.