En resumen
- CVE-2025-11374 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a github.com/hashicorp/consul, consul (hashicorp).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.43%, mayor que el 36.8% de las vulnerabilidades.
- Solución: actualizar a 1.22.0, 1.20.8, 1.21.6, 1.18.12 o posterior.
| Package | Affected versions | Patched versions |
|---|
| github.com/hashicorp/consul Go | < 1.22.0
| 1.22.0
|
| consul | ≥ 1.19.0, < 1.20.8≥ 1.21.0, < 1.21.6< 1.18.12< 1.22.0
| 1.20.81.21.61.18.121.22.0
|
Description
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
NVD description
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
Más vulnerabilidades de github.com/hashicorp/consul
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free