CVE-2021-43667

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-11-18 · updated 2026-06-17
Weakness: CWE-476

Description

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any leader node will crash.

Affected products

Linuxfoundation Fabric: 1.4.0, 2.0.0, 2.1.0

References

https://github.com/hyperledger/fabric/pull/2844
https://jira.hyperledger.org/browse/FAB-18529
https://github.com/hyperledger/fabric/pull/2844
https://jira.hyperledger.org/browse/FAB-18529

Get alerted when CVE-2021-43667 or the next vulnerability affects your stack