VDB
Sign up
HIGH7.5

GHSA-23jv-v6qj-3fhh

Denial of Service (DoS) in HashiCorp Consul

Quick fix

GHSA-23jv-v6qj-3fhh — github.com/hashicorp/consul: upgrade to the fixed version with the command below.

go get github.com/hashicorp/consul@v1.6.3

Details

HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.

### Specific Go Packages Affected github.com/hashicorp/consul/agent/consul

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/hashicorp/consul
Introduced in: 0Fixed in: 1.6.3
Fixgo get github.com/hashicorp/consul@v1.6.3

References