Wind River Support Network

HomeDefectsLIN1019-9891

Fixed

LIN1019-9891 : Security Advisory - consul - CVE-2023-1297

Created: Jun 4, 2023 Updated: Jun 16, 2023

Resolved Date: Jun 16, 2023

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3

CREATE(Triage):(User=admin) CVE-2023-1297 (https://nvd.nist.gov/vuln/detail/CVE-2023-1297)