Important Photon OS Security Update - PHSA-2020-3.0-0163

Updates of 'linux-aws', 'linux', 'consul', 'ruby', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

Denial Of Service (DoS)

github.com/hashicorp/consul is vulnerable to denial of service DoS. Incorrect use of namespaces in comparisons allow an attacker to send infinite Raft writes to cause a namespace replication bug, leading to a resource exhaustion and an application crash...

HashiCorp Consul Enterprise Denial of Service Vulnerability

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. A security vulnerability exists in HashiCorp Consul Enterprise versions 1.7.0...

CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

DEBIAN-CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

Design/Logic Flaw

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

UBUNTU-CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

CVE-2020-25201

Summary: CVE-2020-25201 affects HashiCorp Consul Enterprise versions 1.7.0 through 1.8.4. A namespace replication bug can be triggered to cause a denial of service via infinite Raft writes. The issue is fixed in 1.7.9 and 1.8.5. Affected software: HashiCorp Consul Enterprise (v1.7.x up to 1.8.4)....

consul -- Fix Consul Connect CA private key configuration

Hashicorp reports: Increase the permissions to read from the /connect/ca/configuration endpoint to operator:write. Previously Connect CA configuration, including the private key, set via this endpoint could be read back by an operator with operator:read privileges...

Important Photon OS Security Update - PHSA-2020-0151

Updates of 'consul', 'powershell' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-3.0-0151

Updates of 'powershell', 'consul' packages of Photon OS have been released...

Insecure Access Control

github.com/hashicorp/consul uses an insecure access control. The changes to legacy ACL tokens rules are not enforced as they are not being propagated to the secondary data center...

Denial Of Service (DoS)

github.com/hashicorp/consul is vulnerable to denial of service. The DNS and HTTP cache feature allows an attacker to cause a denial of service condition in the application...

Insecure Access Control

github.com/hashicorp/consul uses an insecure access control. The scope of local and global tokens are not properly enforced, allowing local ACL tokens to be used in other data centers...

Unspecified Vulnerability in HashiCorp Consul (CNVD-2020-51566)

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. A security vulnerability exists in HashiCorp Consul and Consul Enterprise that...

Unspecified Vulnerability in HashiCorp Consul

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. A security vulnerability exists in HashiCorp Consul and Consul Enterprise. No...