CVE-2022-36023

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the malformed gateway request and returns an error to the gateway client. There are no known workarounds, users must upgrade to version 2.4.6.

• CWE-20

• https://github.com/hyperledger/fabric/pull/3572Patch
• https://github.com/hyperledger/fabric/pull/3576Patch
• https://github.com/hyperledger/fabric/pull/3577Patch
• https://github.com/hyperledger/fabric/releases/tag/v2.4.6Release Notes
• https://github.com/hyperledger/fabric/security/advisories/GHSA-qj6r-fhrc-jj5rThird Party Advisory
• https://github.com/hyperledger/fabric/pull/3572Patch
• https://github.com/hyperledger/fabric/pull/3576Patch
• https://github.com/hyperledger/fabric/pull/3577Patch
• https://github.com/hyperledger/fabric/releases/tag/v2.4.6Release Notes
• https://github.com/hyperledger/fabric/security/advisories/GHSA-qj6r-fhrc-jj5rThird Party Advisory

Published

Aug 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36018TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-36019TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-3602A buffer overrun can be triggered in X.509 certificate verif…7.5
• CVE-2022-36020The typo3/html-sanitizer package is an HTML sanitizer, writt…6.1
• CVE-2022-36021Redis is an in-memory database that persists on disk. Authen…5.5
• CVE-2022-36022Deeplearning4J is a suite of tools for deploying and trainin…5.3
• CVE-2022-36024py-cord is a an API wrapper for Discord written in Python. B…6.5
• CVE-2022-36025Besu is a Java-based Ethereum client. In versions newer than…9.1
• CVE-2022-36026TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-36027TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-36028Greenlight is an end-user interface for BigBlueButton server…6.1
• CVE-2022-36029Greenlight is an end-user interface for BigBlueButton server…6.1