CVE-2023-1297
CVE-2023-1297 · Consul Cluster Peering can Result in Denial of Service
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3
CVSS 4.9 · Medium · EPSS 0.8%
- Published
- Updated
Stack: system
Affected products and versions
consul
- Versions
- ≥ 1.14.0, ≤ 1.14.5: Affected (semver)
- ≥ 1.15.0, ≤ 1.15.3: Affected (semver)
No fix published
consul enterprise
- Versions
- ≥ 1.14.0, ≤ 1.14.5: Affected (semver)
- ≥ 1.15.0, ≤ 1.15.3: Affected (semver)
No fix published
consul Ubuntu:18.04:LTS
- Versions
- 0.6.4~dfsg-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
consul Ubuntu:20.04:LTS
- Versions
- 1.0.7~dfsg1-5ubuntu1
- 1.4.4~dfsg1-2ubuntu2
- 1.5.2+dfsg1-6
- 1.5.2+dfsg1-10
- 1.5.2+dfsg1-12
- 1.5.2+dfsg2-14
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
consul Ubuntu:22.04:LTS
- Versions
- 1.7.4+dfsg1-1
- 1.8.7+dfsg1-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published