Asymmetric denial of service In github.com/hashicorp/consul
Description
Denial of Service (DoS) in HashiCorp Consul HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7.4.
Specific Go Packages Affected
github.com/hashicorp/consul/agent/consul/discoverychain
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 go | 1.6.6, 1.7.4 | ||
 debian 11 | 1.7.4+dfsg1-1 | ||
go | v1.6.6, v1.7.4 |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2. 3. 4.