CVE-2020-7219
Denial of Service (DoS) in HashiCorp Consul
Summary
Denial of Service (DoS) in HashiCorp Consul
Original description
The description as published by the source.
HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.
Specific Go Packages Affected
github.com/hashicorp/consul/agent/consul
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
consul
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.6.2"}]}]
Go
github.com/hashicorp/consul
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.6.3"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-7219 consul Fixed in: 1.7.0+dfsg1-1
References
- advisory hashicorp.com
- advisory nvd.nist.gov
- web github.com
- web hashicorp.com