Em resumo
- CVE-2025-11374 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta github.com/hashicorp/consul, consul (hashicorp).
- Chance de exploração nos próximos 30 dias (EPSS): 0.43%, maior que 36.8% das vulnerabilidades.
- Correção: atualize para 1.22.0, 1.20.8, 1.21.6, 1.18.12 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| github.com/hashicorp/consul Go | < 1.22.0
| 1.22.0
|
| consul | ≥ 1.19.0, < 1.20.8≥ 1.21.0, < 1.21.6< 1.18.12< 1.22.0
| 1.20.81.21.61.18.121.22.0
|
Description
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
NVD description
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
Mais vulnerabilidades de github.com/hashicorp/consul
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free