| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hyperledger/fabric | ≥ 2.4.0, < 2.4.6 | 2.4.6 |
| fabric | < 2.4.6 | 2.4.6 |
If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. This fix checks for the malformed gateway request and returns an error to the gateway client.
Fixed in v2.4.6.
None, users must upgrade to v2.4.6.
https://github.com/hyperledger/fabric/releases/tag/v2.4.6
If you have any questions or comments about this advisory:
Thank you to Haosheng Wang of OPPO ZIWU Security Lab for this disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free