p PatchFirst

CVE-2023-0845

CVE-2023-0845 · Consul Server Panic when Ingress and API Gateways Configured with Peering

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

CVSS 4.9 · Medium · EPSS 1.0%

Published
Updated

Stack: system

Affected products and versions

  • consul

    Versions
    • 1.14.0: Affected
    • 1.14.1: Affected
    • 1.14.2: Affected
    • 1.14.3: Affected
    • 1.14.4: Affected

    No fix published

  • consul enterprise

    Versions
    • 1.14.0: Affected
    • 1.14.1: Affected
    • 1.14.2: Affected
    • 1.14.3: Affected
    • 1.14.4: Affected

    No fix published

  • consul Ubuntu:18.04:LTS

    Versions
    • 0.6.4~dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • consul Ubuntu:20.04:LTS

    Versions
    • 1.0.7~dfsg1-5ubuntu1
    • 1.4.4~dfsg1-2ubuntu2
    • 1.5.2+dfsg1-6
    • 1.5.2+dfsg1-10
    • 1.5.2+dfsg1-12
    • 1.5.2+dfsg2-14
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • consul Ubuntu:22.04:LTS

    Versions
    • 1.7.4+dfsg1-1
    • 1.8.7+dfsg1-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →