CVE-2022-45196 - Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name

Back Back to CVE browser

HIGH

Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name

Published Nov 12, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.85%

Description

Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-670

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0123
Advisory
https://github.com/SmartBFT-Go/fabric/issues/286
ExploitIssue TrackingThird Party Advisory
https://github.com/hyperledger/fabric/pull/2934
PatchThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0123		Advisory
https://github.com/SmartBFT-Go/fabric/issues/286		ExploitIssue TrackingThird Party Advisory
https://github.com/hyperledger/fabric/pull/2934		PatchThird Party Advisory