Most recent entries from all

bdu:2023-01973

BIT-consul-2023-0845 — Consul Server Panic when Ingress and API Gateways Configured with Peering

Affected: Bitnami: consul

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

EUVD-2026-219918

fkie_cve-2023-0845

GHSA-wj6x-hcc2-f32j — Consul Server Panic when Ingress and API Gateways Configured with Peering Connections

Affected: Go: github.com/hashicorp/consul

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) an authenticated user with service:write permissions could trigger a workflow that causes Consul server and client agents to crash under certain circumstances. To exploit this vulnerability, an attacker requires access to an ACL token with service:write permissions, and there needs to be at least one running ingress or API gateway that is configured to route traffic to an upstream service.

gsd-2023-0845

UBUNTU-CVE-2023-0845

Affected: Ubuntu:18.04:LTS: consul, Ubuntu:20.04:LTS: consul, Ubuntu:22.04:LTS: consul