7.5
Élevée
CVE-2026-15972 Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of…
Description
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the external gRPC listeners. A remote attacker may exhaust agent file descriptors, goroutines, and memory by opening many incomplete connections, potentially preventing legitimate clients from connecting. This vulnerability, CVE-2026-15972, is fixed in Consul 2.0.3 and Consul Enterprise 1.21.17, 1.22.11, and 2.0.3.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Consul 1.13 | 1.13.0 → < 2.0.3 | 2.0.3 |
| Consul Enterprise 1.13 | 1.13.0 → < 2.0.3 | 2.0.3 |
Références
- discuss.hashicorp.com discuss.hashicorp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Consul
Les 27 CVE de Consul →
CVE-2026-115804
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may…
6.4
Moyenne
CVE-2026-105626
HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an…
7.5
Élevée
CVE-2026-105608
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration
8.8
Élevée
CVE-2026-105765
HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's…
7.5
Élevée