| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/consul | ≥ 1.15.0, < 1.15.3< 1.14.5 | 1.15.31.14.5 |
| consul | ≥ 1.13.0, < 1.14.7≥ 1.15.0, < 1.15.3 | 1.14.71.15.3 |
Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free