Lucene search

K
osvGoogleOSV:BIT-CONSUL-2023-1297
HistoryMar 06, 2024 - 10:51 a.m.

BIT-consul-2023-1297

2024-03-0610:51:27
Google
osv.dev
4
consul
cluster peering
vulnerability
denial of service
software update

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.0%

Consul and Consul Enterprise’s cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.0%