CVE-2023-1297
Consul Cluster Peering can Result in Denial of Service
Summary
Consul Cluster Peering can Result in Denial of Service
Original description
The description as published by the source.
Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
consul
[{"type":"SEMVER","events":[{"introduced":"1.13.0"},{"fixed":"1.14.7"},{"introduced":"1.15.0"},{"fixed":"1.15.3"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.hashicorp.com