CVE-2022-31121

Name of the Vulnerable Software and Affected Versions Hyperledger Fabric versions prior to 2.2.7 Hyperledger Fabric versions prior to 2.4.5

Description Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions, if a consensus client sends a malformed consensus request to an orderer, it may crash the orderer node. A fix has been added which checks for missing consensus messages and returns an error to the consensus client should the message be missing.

Recommendations To resolve the issue, upgrade to version 2.2.7 or v2.4.5. As there are no known workarounds for this issue, users must upgrade to the specified versions to mitigate the risk.