CVE-2022-36023CWE-20

Remote denial of service in Hyperledger Fabric Gateway

High · published August 18, 2022

CVSS v3.1
7.0
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the malformed gateway request and returns an error to the gateway client. There are no known workarounds, users must upgrade to version 2.4.6.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.01126 · 66.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-08-18T00:00Z
EPSS history
Timeline
  • 18 AUG 00:00Z
    Remote denial of service in Hyperledger Fabric Gateway
    cvelistv5