CVE-2022-24687

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.9.14, 1.10.7, and 1.11.2 clusters with at least one Ingress Gateway allow a user with service:w...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.9.14, 1.10.7, and 1.11.2 clusters with at least one Ingress Gateway allow a user with service:write to register a specifically-defined service that can cause Consul servers to panic. Fixed in 1.9.15, 1.10.8, and 1.11.3.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami consul

[{"type":"SEMVER","events":[{"introduced":"1.8.0"},{"fixed":"1.9.15"},{"introduced":"1.10.0"},{"fixed":"1.10.8"},{"introduced":"1.11.0"},{"fixed":"1.11.3"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2022-24687 consul

Références

advisory discuss.hashicorp.com
advisory discuss.hashicorp.com
advisory security.netapp.com
web security.gentoo.org
web nvd.nist.gov