CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2020-25201
HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5.
Severity
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hashicorp:consul
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-496g-fr33-whrf | Go | github.com/hashicorp/consul | >=1.7.0 <1.7.9 | 1.7.9 |
| GHSA-496g-fr33-whrf | Go | github.com/hashicorp/consul | >=1.8.0 <1.8.5 | 1.8.5 |
| GO-2024-2501 | Go | github.com/hashicorp/consul | >=1.7.0 <1.7.9 >=1.8.0 <1.8.5 | 1.7.9, 1.8.5 |