CVE-2020-13250

HIGH

HashiCorp Consul <1.6.6, <1.7.4 - DoS

Title source: llm
STIX 2.1

Description

HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

References (3)

Core 3
Core References
Patch, Third Party Advisory x_refsource_confirm
https://github.com/hashicorp/consul/pull/8023

Scores

CVSS v3 7.5
EPSS 0.0087
EPSS Percentile 75.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-770
Status published
Products (2)
hashicorp/consul 1.2.0 - 1.6.6 (2 CPE variants)
hashicorp/consul 1.2.0 - 1.6.6Go
Published Jun 11, 2020
Tracked Since Feb 18, 2026