| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/consul | ≥ 1.10.0, < 1.10.8≥ 1.11.0, < 1.11.3≥ 1.8.0, < 1.9.15 | 1.10.81.11.31.9.15 |
| consul | ≥ 1.10.0, < 1.10.8≥ 1.11.0, < 1.11.3≥ 1.8.0, < 1.9.15 | 1.10.81.11.31.9.15 |
HashiCorp Consul and Consul Enterprise 1.8.0 through 1.9.14, 1.10.7, and 1.11.2 has Uncontrolled Resource Consumption. Clusters with at least one ingress gateway configured may allow a user with service:write permission to register a specifically-defined service that can cause the Consul server to panic and shutdown. Versions 1.9.15, 1.10.8, and 1.11.3 contain patches for the problem.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free