BIT-consul-2020-25201

vendorUSosv

view advisory published 2024-03-06Licence: per source

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-25201US	high7.5	2.61% (85th)	—	2020-11-04
HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.…

references

External citations — patches, advisories, analysis.

https://github.com/hashicorp/consul/blob/master/CHANGELOG.md#185-october-23-2020WEB
https://security.gentoo.org/glsa/202208-09WEB
https://www.hashicorp.com/blog/category/consulWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan