CVE-2020-13250 – HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in

5 years ago

HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13250

Reference (s):

https://github.com/hashicorp/consul/blob/v1.6.6/CHANGELOG.md
https://github.com/hashicorp/consul/blob/v1.7.4/CHANGELOG.md
https://github.com/hashicorp/consul/pull/8023