CVE-2020-13250 Information
Share on:
Feb 14, 2021
cve
Description
HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reference
https://github.com/hashicorp/consul/blob/v1.6.6/CHANGELOG.md https://github.com/hashicorp/consul/blob/v1.7.4/CHANGELOG.md https://github.com/hashicorp/consul/pull/8023
Attack Complexity
LOW
Privileges Required
NONE
User Interaction Required
NONE
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
NONE
Availability Impact
NONE
Base Score
HIGH
Base Severity
7.5