GHSA-c57c-7hrj-6q6v
Hashicorp Consul vulnerable to denial of service
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/hashicorp/consul | < 1.14.5 | 1.14.5 |
| Go | github.com/hashicorp/consul | >= 1.15.0, < 1.15.3 | 1.15.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3
References
External links from the advisory. They lead to third-party sites.