{"id":"CVE-2022-45196","aliases":["BIT-hyperledger-fabric-orderer-2022-45196","BIT-hyperledger-fabric-peer-2022-45196","BIT-hyperledger-fabric-tools-2022-45196","EUVD-2022-0123","GHSA-wp68-67c6-87fh","PYSEC-2022-43055"],"status":"published","title":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by...","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00979,"percentile":0.62485,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-670"],"published":"2022-11-12T00:00:00Z","modified":"2026-10-28T02:31:09Z","fixes":[{"ecosystem":"Bitnami","package":"hyperledger-fabric-orderer","fixed_in":["2.3.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"hyperledger-fabric-peer","fixed_in":["2.3.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"hyperledger-fabric-tools","fixed_in":["2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"hyperledger-fabric-orderer","ranges":[{"type":"SEMVER","events":[{"introduced":"2.3.0"},{"fixed":"2.3.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"hyperledger-fabric-peer","ranges":[{"type":"SEMVER","events":[{"introduced":"2.3.0"},{"fixed":"2.3.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"hyperledger-fabric-tools","ranges":[{"type":"SEMVER","events":[{"introduced":"2.3.0"},{"fixed":"2.3.1"}]}]}],"products":[{"vendor":"hyperledger","product":"fabric"}],"references":[{"url":"https://github.com/SmartBFT-Go/fabric/issues/286","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"https://github.com/hyperledger/fabric/pull/2934","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45196","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wp68-67c6-87fh"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45196.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-45196","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","status":"published","published":"2022-11-12T00:00:00Z","modified":"2025-05-01T18:59:54.349Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-670"],"updated_at":"2026-11-02T14:34:31.519788Z"}],"euvd":[{"id":"EUVD-2022-0123","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","status":"published","published":"2022-11-12T00:00:00Z","modified":"2025-05-01T18:59:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:51:56.360543Z"}],"ghsa":[{"id":"GHSA-wp68-67c6-87fh","title":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by...","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","status":"published","published":"2022-11-13T12:00:18Z","modified":"2023-01-28T05:03:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:43:58.014629Z"}],"nvd":[{"id":"CVE-2022-45196","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","status":"published","published":"2022-11-12T20:15:09.823Z","modified":"2026-06-17T05:09:37.313Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-670"],"updated_at":"2026-11-02T14:07:31.914793Z"}],"osv":[{"id":"CVE-2022-45196","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","status":"published","published":"2022-11-12T00:00:00Z","modified":"2026-10-28T02:31:09.381155666Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"PYSEC-2022-43055","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","status":"withdrawn","published":"2022-11-12T20:15:00Z","modified":"2023-08-17T03:22:31.453589Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:53.449407Z"},{"id":"BIT-hyperledger-fabric-orderer-2022-45196","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","status":"published","published":"2024-07-18T19:21:43.753Z","modified":"2026-09-08T08:47:53.976529433Z","updated_at":"2026-11-02T15:28:31.02759Z"},{"id":"BIT-hyperledger-fabric-peer-2022-45196","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","status":"published","published":"2024-07-18T19:21:42.058Z","modified":"2026-09-08T08:47:53.432987408Z","updated_at":"2026-11-02T15:28:31.02759Z"},{"id":"BIT-hyperledger-fabric-tools-2022-45196","description":"Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist.","status":"published","published":"2024-07-18T19:21:42.454Z","modified":"2026-09-08T08:47:54.048633738Z","updated_at":"2026-11-02T15:28:31.02759Z"}]}}