DEBIAN-CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

Design/Logic Flaw

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

UBUNTU-CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

CVE-2020-25201

Summary: CVE-2020-25201 affects HashiCorp Consul Enterprise versions 1.7.0 through 1.8.4. A namespace replication bug can be triggered to cause a denial of service via infinite Raft writes. The issue is fixed in 1.7.9 and 1.8.5. Affected software: HashiCorp Consul Enterprise (v1.7.x up to 1.8.4)....

CVE-2020-25201

Removed by vendor...

CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

PT-2020-16014

Name of the Vulnerable Software and Affected Versions HashiCorp Consul Enterprise versions 1.7.0 through 1.8.4 Description The issue is related to a namespace replication bug in HashiCorp Consul Enterprise, which can be triggered to cause denial of service via infinite Raft writes. Recommendation...

CVE-2020-25201: Undefined Security Weakness

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5...

consul -- Fix Consul Connect CA private key configuration

Hashicorp reports: Increase the permissions to read from the /connect/ca/configuration endpoint to operator:write. Previously Connect CA configuration, including the private key, set via this endpoint could be read back by an operator with operator:read privileges...

Important Photon OS Security Update - PHSA-2020-0151

Updates of 'consul', 'powershell' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-3.0-0151

Updates of 'powershell', 'consul' packages of Photon OS have been released...

Insecure Access Control

github.com/hashicorp/consul uses an insecure access control. The changes to legacy ACL tokens rules are not enforced as they are not being propagated to the secondary data center...

Denial Of Service (DoS)

github.com/hashicorp/consul is vulnerable to denial of service. The DNS and HTTP cache feature allows an attacker to cause a denial of service condition in the application...

Insecure Access Control

github.com/hashicorp/consul uses an insecure access control. The scope of local and global tokens are not properly enforced, allowing local ACL tokens to be used in other data centers...

HashiCorp Consul Input Validation Error Vulnerability

HashiCorp Consul is a distributed, highly available data center-aware solution. The product is used to connect and provision applications across dynamically distributed infrastructures. An input validation error vulnerability exists in HashiCorp Consul and Consul Enterprise, which stems from the...

Unspecified Vulnerability in HashiCorp Consul

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. A security vulnerability exists in HashiCorp Consul and Consul Enterprise. No...

Unspecified Vulnerability in HashiCorp Consul (CNVD-2020-51566)

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. A security vulnerability exists in HashiCorp Consul and Consul Enterprise that...