BIT-consul-2020-13250

vendorUSosv

view advisory published 2024-03-06Licence: per source

HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-13250US	high7.5	2.92% (87th)	—	2020-06-11
HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.…

references

External citations — patches, advisories, analysis.

https://github.com/hashicorp/consul/blob/v1.6.6/CHANGELOG.mdADVISORY
https://github.com/hashicorp/consul/blob/v1.7.4/CHANGELOG.mdADVISORY
https://github.com/hashicorp/consul/pull/8023ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2020-13250WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan