Remote denial of service in Hyperledger Fabric Gateway

概要

参考情報

• hyperledger/fabric security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2022-36023 · ADVISORY
• hyperledger/fabric#3572 · WEB
• hyperledger/fabric#3576 · WEB
• hyperledger/fabric#3577 · WEB
• hyperledger/fabric · PACKAGE
• hyperledger/fabric release v2.4.6 · WEB

github.com/hyperledger/fabric のその他の脆弱性

• CVE-2024-45244中 5.3Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.
• CVE-2023-46132中 6.5Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linkin…
• CVE-2022-31121高 7.5Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus re…
• CVE-2021-43669高 7.5A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.0.1, v2.3.0. It can easily break down as many orderers as the att…
• CVE-2021-43667高 7.5A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose pa…