CVE-2022-36023highCWE-20

CVE-2022-36023: high-severity vulnerability in hyperledger fabric

Remote denial of service in Hyperledger Fabric Gateway

Published · Updated

Follow this CVE+ Monitor fabric+ Monitor github.com/hyperledger/fabric

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7epss 1.2%
Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the malformed gateway request and returns an error to the gateway client. There are no known workarounds, users must upgrade to version 2.4.6.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected products
hyperledger · fabric
Related CVEs — hyperledger fabric

In the same product, most dangerous first.

CVE-2022-31121HIGHImproper Input Validation in fabric hyperledgerEPSS 2.1%CVE-2026-41586CRITICALObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCEEPSS 0.5%CVE-2023-46132HIGHCrosslinking transaction attack in hyperledger/fabricEPSS 0.5%