Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40829
HistoryJun 08, 2023 - 4:01 a.m.

Denial Of Service (DoS)

2023-06-0804:01:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
denial of service
consul
vulnerability
software
peer cluster

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

33.9%

github.com/hashicorp/consul is vulnerable to Denial Of Service (DoS). The vulnerability exists because the peer cluster with a service of the same name as a local service could corrupt the Consul state, resulting in Denial of Service.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

33.9%