CVE-2020-13250

HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to...

Original description

The description as published by the source.

HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami consul

[{"type":"SEMVER","events":[{"introduced":"1.2.0"},{"fixed":"1.6.6"},{"introduced":"1.7.0"},{"fixed":"1.7.4"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2020-13250 consul Fixed in: 1.7.4+dfsg1-1

References

advisory github.com
advisory github.com
advisory github.com
web nvd.nist.gov