Lucene search

K
hackeroneFatal0H1:1604951
HistoryJun 17, 2022 - 8:51 a.m.

Hyperledger: Remote denial of service in HyperLedger Fabric

2022-06-1708:51:18
fatal0
hackerone.com
54

0.002 Low

EPSS

Percentile

58.7%

This issue was caused by a missing check of nil.

> An orderer to orderer consensus message that contains an empty inner message crashes the node because it attempts to figure out its type and the mere action of determining the type of a nil pointer, causes a panic.

Thank you to Haosheng Wang of OPPO ZIWU Security Lab for this disclosure.

0.002 Low

EPSS

Percentile

58.7%