PT-2021-23901

CVE-2021-43669

·

تاريخ النشر

2021-11-18

·

تاريخ التحديث

2021-12-03

الوصف من

CVSS 3.1
7.5
عالية
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: HyperLedger Fabric versions 1.4.0, 2.0.0, 2.0.1, 2.3.0
Description: A vulnerability has been detected that can easily break down as many orderers as the attacker wants by constructing a message with an invalid header to the Order interface.
Recommendations: For HyperLedger Fabric version 1.4.0, update to a version that includes the fix for this issue. For HyperLedger Fabric version 2.0.0, update to a version that includes the fix for this issue. For HyperLedger Fabric version 2.0.1, update to a version that includes the fix for this issue. For HyperLedger Fabric version 2.3.0, update to a version that includes the fix for this issue.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-J96P-R523-8R3W
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾