consulGHSA-23jv-v6qj-3fhh
Denial of Service (DoS) in HashiCorp Consul
High7.5CVE-2020-7219 · Published May 18, 2021 · updated Sep 10, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| github.com/hashicorp/consul Go | < 1.6.3 | 1.6.3 |
Details and references
HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3. ### Specific Go Packages Affected github.com/hashicorp/consul/agent/consul
More consul advisories
All| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| May 182021 | Improper Input Validation in HashiCorp Consul CVE-2020-13170Medium5.3fixed in 1.6.6, 1.7.4 | Medium5.3 | 1.6.6, 1.7.4 |
| May 182021 | Allocation of Resources Without Limits or Throttling in Hashicorp Consul CVE-2020-13250High7.5fixed in 1.6.6, 1.7.4 | High7.5 | 1.6.6, 1.7.4 |
| Jun 232021 | Incorrect Permission Assignment for Critical Resource in Hashicorp Consul CVE-2020-12797Medium5.3fixed in 1.6.6, 1.7.4 | Medium5.3 | 1.6.6, 1.7.4 |
| Jul 192021 | Hashicorp Consul Missing SSL Certificate Validation CVE-2021-32574High7.5fixed in 1.10.1 | High7.5 | 1.10.1 |
| Jul 192021 | HashiCorp Consul L7 deny intention results in an allow action CVE-2021-36213High7.5fixed in 1.10.1 | High7.5 | 1.10.1 |
| Jul 282021 | Incorrect Authorization in HashiCorp Consul CVE-2020-7955Medium5.3fixed in 1.6.3 | Medium5.3 | 1.6.3 |