HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in     1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.
    (CVE-2020-13250)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in
    1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.
    (CVE-2020-13250)

An update of the telegraf package has been released.

An update of the consul package has been released.

ID	Name	Product	Family	Severity
250557	Linux Distros Unpatched Vulnerability : CVE-2020-13250	Nessus	Misc.	high
418871	SCA: security update for github.com/hashicorp/consul (GHSA-rqjq-mrgx-85hp)	Tenable Cloud Security	SCA Checks	high
418871	SCA: security update for github.com/hashicorp/consul (GHSA-rqjq-mrgx-85hp)	Tenable Self-Hosted Container Security	SCA Checks	high
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	high
203044	Photon OS 3.0: Consul PHSA-2020-3.0-0151	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2020-13250

high

Tenable Plugins

high

high

high

high

high