CVE-2025-11374— Consul's KV endpoint is vulnerable to denial of service
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-11374
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Consul's KV endpoint is vulnerable to denial of service
Source: NVD (National Vulnerability Database)
Vulnerability Description
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
不加限制或调节的资源分配
Source: NVD (National Vulnerability Database)
Vulnerability Title
HashiCorp Consul和HashiCorp Consul Enterprise 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HashiCorp Consul和HashiCorp Consul Enterprise都是美国HashiCorp公司的产品。HashiCorp Consul是一套分布式、高可用数据中心感知解决方案。该产品用于跨动态分布式基础架构连接和配置应用程序。HashiCorp Consul Enterprise是一个系统服务发现和配置管理工具。 HashiCorp Consul和HashiCorp Consul Enterprise存在安全漏洞，该漏洞源于Content Length标头验证不正确，可能导致拒绝服
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HashiCorp | Consul | 0 ~ 1.22.0 | - | |
| HashiCorp | Consul Enterprise | 0 ~ 1.22.0 | - |
II. Public POCs for CVE-2025-11374
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-11374
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Consul
- CVE-2026-2808
Consul vulnerable to arbitrary file reads through the vault - CVE-2025-11375
Consul's event endpoint is vulnerable to denial of service - CVE-2024-10086
Consul Vulnerable To Reflected XSS On Content-Type Error Man - CVE-2024-10006
Consul L7 Intentions Vulnerable To Headers Bypass - CVE-2024-10005
Consul L7 Intentions Vulnerable To URL Path Bypass
Same vendor: HashiCorp
- CVE-2026-7776
Boundary Workers Vulnerable to Denial of Service During TLS - CVE-2026-5807
Vault Vulnerable to Denial-of-Service via Unauthenticated Ro - CVE-2026-4525
Vault Token Leaked to Backends via Authorization: Bearer Pas - CVE-2026-5052
Vault Vulnerable to Server-Side Request Forgery in ACME Chal - CVE-2026-3605
Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial
Same weakness: CWE-770
- CVE-2026-42294
Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in W - CVE-2026-42189
Russh: Pre-auth DoS via unbounded allocation in keyboard-int - CVE-2026-42793
Atom table exhaustion via attacker-controlled GraphQL SDL na - CVE-2026-44499
ZEBRA: Permanent Block Discovery Halt via Gossip Queue Satur - CVE-2026-44500
ZEBRA: Allocation Amplification in Inbound Network Deseriali
V. Comments for CVE-2025-11374
No comments yet