PT-2021-23901

CVE-2021-43669

·

Published

2021-11-18

·

Updated

2021-12-03

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: HyperLedger Fabric versions 1.4.0, 2.0.0, 2.0.1, 2.3.0
Description: A vulnerability has been detected that can easily break down as many orderers as the attacker wants by constructing a message with an invalid header to the Order interface.
Recommendations: For HyperLedger Fabric version 1.4.0, update to a version that includes the fix for this issue. For HyperLedger Fabric version 2.0.0, update to a version that includes the fix for this issue. For HyperLedger Fabric version 2.0.1, update to a version that includes the fix for this issue. For HyperLedger Fabric version 2.3.0, update to a version that includes the fix for this issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-444: Inconsistent Interpretation of HTTP Requests (\'HTTP Request/Response Smuggling\')
Related identifiers
CVE-2021-43669
GHSA-J96P-R523-8R3W
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com