CVE-2023-1297 in Consul

Resumen

por MITRE • 2023-06-03

Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: HashiCorp Inc.
• Reservar: 2023-03-09
• Divulgación: 2023-06-03
• Moderación: aceptado
• Artículo: VDB-230626
• CPE: listo
• CWE: CWE-826 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00768
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-1297
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-1297
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-1297/