← CVE Intelligence

CVE-2023-1297

Consul Cluster Peering can Result in Denial of Service PUBLISHED

Description (CNA)

Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3

Affected (CNA)

Vendor / productVersions
HashiCorp / Consulaffected 1.14.0 through 1.14.5; affected 1.15.0 through 1.15.3
HashiCorp / Consul Enterpriseaffected 1.14.0 through 1.14.5; affected 1.15.0 through 1.15.3

CWE

CWE-826

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.