Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Consul | Hashicorp | * | 1.14.5 (excluding) |
| Consul | Ubuntu | bionic | * |
| Consul | Ubuntu | kinetic | * |
| Consul | Ubuntu | mantic | * |
| Consul | Ubuntu | trusty | * |
| Consul | Ubuntu | xenial | * |