HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and     were susceptible to unauthenticated denial of service. Fixed in 1.6.3. (CVE-2020-7219)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and
    were susceptible to unauthenticated denial of service. Fixed in 1.6.3. (CVE-2020-7219)

An update of the telegraf package has been released.

An update of the kapacitor package has been released.

An update of the consul package has been released.

ID	Name	Product	Family	Severity
259884	Linux Distros Unpatched Vulnerability : CVE-2020-7219	Nessus	Misc.	high
408638	SCA: security update for github.com/hashicorp/consul (GHSA-23jv-v6qj-3fhh)	Tenable Cloud Security	SCA Checks	high
408638	SCA: security update for github.com/hashicorp/consul (GHSA-23jv-v6qj-3fhh)	Tenable Self-Hosted Container Security	SCA Checks	high
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	high
204224	Photon OS 5.0: Kapacitor PHSA-2023-5.0-0045	Nessus	PhotonOS Local Security Checks	critical
134873	Photon OS 3.0: Consul PHSA-2020-3.0-0069	Nessus	PhotonOS Local Security Checks	medium

Detections

Analytics

CVE-2020-7219

high

Tenable Plugins

high

high

high

high

critical

medium