Skip to main content

Improper Input Validation

CVE-2022-31121

High
7.5/10

Summary

Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions, if a consensus client sends a malformed consensus request to an orderer, it may crash the orderer node. A fix has been added in commit 0f1835949 which checks for missing consensus messages and returns an error to the consensus client should the message be missing. This issue affects versions prior to 2.2.7, 2.3.x and 2.4.x prior to 2.4.5. Users are advised to upgrade to versions 2.2.7 or v2.4.5. There are no known workarounds for this issue.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-20 - Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

Advisory Timeline

  • Published