| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/consul | ≥ 1.2.0, < 1.6.6≥ 1.7.0, < 1.7.4 | 1.6.61.7.4 |
| consul | ≥ 1.2.0, < 1.6.6≥ 1.7.0, < 1.7.4 | 1.6.61.7.4 |
HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service.
github.com/hashicorp/consul/agent/config
The vulnerability is fixed in versions 1.6.6 and 1.7.4.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free