CVE-2022-24687

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.9.14, 1.10.7, and 1.11.2 clusters with at least one Ingress Gateway allow a user with service:w...

Original description

The description as published by the source.

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.9.14, 1.10.7, and 1.11.2 clusters with at least one Ingress Gateway allow a user with service:write to register a specifically-defined service that can cause Consul servers to panic. Fixed in 1.9.15, 1.10.8, and 1.11.3.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami consul

[{"type":"SEMVER","events":[{"introduced":"1.8.0"},{"fixed":"1.9.15"},{"introduced":"1.10.0"},{"fixed":"1.10.8"},{"introduced":"1.11.0"},{"fixed":"1.11.3"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2022-24687 consul

References

advisory discuss.hashicorp.com
advisory discuss.hashicorp.com
advisory security.netapp.com
web security.gentoo.org
web nvd.nist.gov