CVE-2023-1297
Consul Cluster Peering can Result in Denial of Service
Résumé
Consul Cluster Peering can Result in Denial of Service
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
consul
[{"type":"SEMVER","events":[{"introduced":"1.13.0"},{"fixed":"1.14.7"},{"introduced":"1.15.0"},{"fixed":"1.15.3"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.hashicorp.com