Consul key/value endpoint is vulnerable to denial of service

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-11374 · ADVISORY
• hashicorp/consul#22916 · WEB
• hashicorp/consul commit 72a358c · WEB
• discuss.hashicorp.com/t/hcsec-2025-29-consuls-kv-endpoint-is-vulnerable-to-denial-of-service/76724 · WEB
• hashicorp/consul · PACKAGE
• hashicorp/consul release v1.22.0 · WEB
• pkg.go.dev/vuln/GO-2025-4081 · WEB
• GitHub Advisory GHSA-7g3r-8c6v-hfmr · ADVISORY

Lỗ hổng khác của github.com/hashicorp/consul

• CVE-2026-2808TRUNG BÌNH 6.8HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernete…
• CVE-2025-11375TRUNG BÌNH 6.5Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Conten…
• CVE-2024-10086TRUNG BÌNH 6.1A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP head…
• CVE-2024-10006TRUNG BÌNH 5.8A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP…
• CVE-2024-10005TRUNG BÌNH 5.8A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HT…