Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-0845

Опубликовано: 09 мар. 2023
Источник: debian
EPSS Низкий

Описание

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
consulnot-affectedpackage

Примечания

  • https://discuss.hashicorp.com/t/hcsec-2023-06-consul-server-panic-when-ingress-and-api-gateways-configured-with-peering-connections/51197

EPSS

Процентиль: 52%
0.00287
Низкий

Связанные уязвимости

CVSS3: 4.9
ubuntu
больше 2 лет назад

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

CVSS3: 6.5
redhat
больше 2 лет назад

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

CVSS3: 4.9
nvd
больше 2 лет назад

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

CVSS3: 6.5
redos
около 2 лет назад

Уязвимость Consul

CVSS3: 6.5
github
больше 2 лет назад

Consul Server Panic when Ingress and API Gateways Configured with Peering Connections

EPSS

Процентиль: 52%
0.00287
Низкий