NULL Pointer Dereference
CVE-2023-0845
Summary
Consul and Consul Enterprise allow an authenticated user with "service:write" permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability affects github.com/hashicorp/consul versions 1.14.0 through 1.14.4.
- LOW
- NETWORK
- NONE
- UNCHANGED
- NONE
- LOW
- NONE
- HIGH
CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
References
Advisory Timeline
- Published