← Vulnerability feed

Vulnerability record · CVE-2022-45196 · published 12 November 2022

CVE-2022-45196: Hyperledger fabric vulnerability

Hyperledger · Fabric

Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.

7.5 CVSS 3.1 High EPSS 0.85% · top 43.5% CWE-670 · CWE-670
7.5CVSS 3.1 base score
0.85%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/SmartBFT-Go/fabric/issues/286 ExploitIssue TrackingThird Party Advisory
https://github.com/hyperledger/fabric/pull/2934 PatchThird Party Advisory
https://github.com/SmartBFT-Go/fabric/issues/286 ExploitIssue TrackingThird Party Advisory
https://github.com/hyperledger/fabric/pull/2934 PatchThird Party Advisory

Track CVE-2022-45196 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2026-41586Hyperledger fabric deserialization of untrusted data vulnerabilityHyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to…EPSS 0.63%7.5CVE-2022-31121Hyperledger fabric improper input validation vulnerabilityHyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to …EPSS 2.1%6.5CVE-2023-46132Hyperledger fabric race condition vulnerabilityHyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" result…EPSS 0.52%5.3CVE-2024-45244Hyperledger fabric authentication bypass by capture-replay vulnerabilityHyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.EPSS 0.59%5.3CVE-2022-36023Hyperledger fabric improper input validation vulnerabilityHyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client ap…EPSS 1.1%7.8CVE-2024-32896Android Pixel logic error allows local privilege escalationCVE-2024-32896 is a logic error in Android (CWE-670/CWE-783) that permits a local attacker to bypass intended restrictions and escalate privileges. I…KEVEPSS 3.0%analysed

Source: NIST National Vulnerability Database (record CVE-2022-45196), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.