Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40829
HistoryJun 08, 2023 - 4:01 a.m.

Denial Of Service (DoS)

2023-06-0804:01:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
denial of service
consul
vulnerability
software
peer cluster

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.9%

github.com/hashicorp/consul is vulnerable to Denial Of Service (DoS). The vulnerability exists because the peer cluster with a service of the same name as a local service could corrupt the Consul state, resulting in Denial of Service.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.9%