CVE-2019-9764 HashiCorp Consul vulnerable to Origin Validation Error
HashiCorp Consul fails to verify server hostnames in TLS, allowing attackers to bypass security controls and potentially intercept or manipulate agent-to-agent communications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-9764?
CVE-2019-9764 is a high-severity vulnerability in n/a, published on 26 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4.
Weakness: CWE-346
Which versions are affected by CVE-2019-9764?
3 open source packages ship an affected version, including github.com/hashicorp/consul. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/hashicorp/consul Go | All versions | 1.4.4 |
github.com/hashicorp/consul Go | All versions | 1.4.4 |
github.com/hashicorp/consul Go | All versions | 1.4.4 |
Products include Hashicorp Consul.
How do I fix CVE-2019-9764?
Upgrade github.com/hashicorp/consul to 1.4.4 or later.
Is CVE-2019-9764 being exploited?
There is no known exploitation of CVE-2019-9764 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2021-41805 Privilege escalation in n/a
- CVE-2021-37219 HashiCorp Consul Privilege Escalation Vulnerability
- CVE-2023-2816 Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner
- CVE-2024-10006 Consul L7 Intentions Vulnerable To Headers Bypass
- CVE-2024-10005 Consul L7 Intentions Vulnerable To URL Path Bypass
Sources
Also known as GHSA-q7fx-wm2p-qfj8, GO-2023-1853, UBUNTU-CVE-2019-9764.