DEBIAN-CVE-2020-13250

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2020-13250

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-13250.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2020-13250

Upstream

CVE-2020-13250

Published

2020-06-11T20:15:11Z

Modified

2026-08-27T13:02:33Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

References

https://security-tracker.debian.org/tracker/CVE-2020-13250

Affected packages

Debian:11 / consul

Package

Name: consul
Purl: pkg:deb/debian/consul?arch=source&distro=bullseye

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.7.4+dfsg1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-13250.json"