CVE-2020-12758 — Improper Resource Shutdown or Release in Hashicorp Consul

CWE-404 — Improper Resource Shutdown or ReleaseCWE-400 — Uncontrolled Resource Consumption6 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.6%
top 29.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Hashicorp ConsulGithub.com Hashicorp ConsulDebian Consul
Timeline
PublishedJun 11
Latest updateAug 21

Description

HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7.4.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶NVDhashicorp/consul1.6.0 — 1.6.6+1
▶Gogithub.com/hashicorp_consul1.6.0-beta1 — 1.6.6+1
▶Debianhashicorp/consul< 1.7.4+dfsg1-1
▶debiandebian/consul< consul 1.7.4+dfsg1-1 (bullseye)

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
OSV
Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul↗2024-08-21
▶
OSV
Denial of Service (DoS) in HashiCorp Consul↗2022-02-15
▶
GHSA
Denial of Service (DoS) in HashiCorp Consul↗2022-02-15
▶
OSV
CVE-2020-12758: HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry↗2020-06-11
▶

📋Vendor Advisories

1
Debian
CVE-2020-12758: consul - HashiCorp Consul and Consul Enterprise could crash when configured with an abnor...↗2020
▶