CVE-2020-7219

HIGH

HashiCorp Consul < 1.6.3 - Unauthenticated Denial of Service via Unbounded Resource Usage

Title source: llm

Description

HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://www.hashicorp.com/blog/category/consul/

Third Party Advisory x_refsource_misc

https://github.com/hashicorp/consul/issues/7159

Scores

CVSS v3 7.5

EPSS 0.0114

EPSS Percentile 78.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-770

Status published

Products (2)

hashicorp/consul < 1.6.2 (2 CPE variants)

hashicorp/consul 0 - 1.6.3Go

Published Jan 31, 2020

Tracked Since Feb 18, 2026