GHSA-rqjq-mrgx-85hp
Allocation of Resources Without Limits or Throttling in Hashicorp Consul
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/hashicorp/consul | >= 1.2.0, < 1.6.6 | 1.6.6 |
| Go | github.com/hashicorp/consul | >= 1.7.0, < 1.7.4 | 1.7.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service.
### Specific Go Packages Affected
github.com/hashicorp/consul/agent/config
### Fix
The vulnerability is fixed in versions 1.6.6 and 1.7.4.
References
External links from the advisory. They lead to third-party sites.