VDB

CVE-2020-13250

CVE-2020-13250 PUBLISHED CVSS 7.5 HIGH

HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

EPSS 2.85% · 86.6th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
2.85%
86.6th percentile

Affected Products

VendorProductVersions
Bitnamiconsul1.7.0, 1.7.0, 1.2.0
Bitnamiconsul1.7.0, 1.2.0

Timeline

  • Jun 11, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Jul 29, 2021 CVE Updated
  • Aug 25, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 1, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›