internal

Jun 26, 2023 GO-2024-2704

  GO-2024-2704: Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul

Changes in this version

+ var ErrPipeClosed = errors.New("pipe listener has been closed")

+ type Listener struct

+ func NewListener(addr net.Addr) *Listener

+ func (l *Listener) Accept() (net.Conn, error)

+ func (l *Listener) Addr() net.Addr

+ func (l *Listener) Close() error

+ func (l *Listener) Handle(conn net.Conn)

+ type PipeListener struct

+ func NewPipeListener() *PipeListener

+ func (*PipeListener) Addr() net.Addr

+ func (p *PipeListener) Accept() (net.Conn, error)

+ func (p *PipeListener) Close() error

+ func (p *PipeListener) DialContext(ctx context.Context, _ string) (net.Conn, error)

Mar 30, 2023 GO-2023-1827 +1 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

Mar 7, 2023 GO-2023-1827 +1 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

Feb 24, 2023 GO-2023-1827 +1 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

Changes in this version

type ClientConnPoolConfig

+ BalancerBuilder gbalancer.Builder

type Logger

+ Warn func(string, ...interface{})

+ type Tracker struct

+ func NewTracker(rb *resolver.ServerResolverBuilder, bb *balancer.Builder) *Tracker

+ func (t *Tracker) AddServer(a types.AreaID, s *metadata.Server)

+ func (t *Tracker) NewRebalancer(dc string) func()

+ func (t *Tracker) RemoveServer(a types.AreaID, s *metadata.Server)

Jan 26, 2023 GO-2023-1639 +1 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Dec 13, 2022 GO-2023-1639 +1 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Nov 30, 2022 GO-2023-1639 +1 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Nov 21, 2022 GO-2023-1639 +1 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Nov 15, 2022 GO-2023-1639 +1 more

  GO-2023-1639: Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Sep 29, 2022 GO-2022-1121 +1 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Jun 23, 2023 GO-2022-1121 +1 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

May 15, 2023 GO-2022-1121 +1 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Mar 7, 2023 GO-2022-1121 +1 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Jan 26, 2023 GO-2022-1121 +1 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Dec 13, 2022 GO-2022-1121 +1 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Nov 30, 2022 GO-2022-1121 +1 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Oct 19, 2022 GO-2022-1121 +1 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Sep 20, 2022 GO-2022-1121 +1 more

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Aug 11, 2022 GO-2022-1029 +3 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

Aug 9, 2022 GO-2022-1029 +3 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

Changes in this version

+ var StatsCounters = []prometheus.CounterDefinition

+ var StatsGauges = []prometheus.GaugeDefinition

+ type ALPNWrapper func(dc, nodeName, alpnProto string, conn net.Conn) (net.Conn, error)

+ type ClientConnPool struct

+ func NewClientConnPool(cfg ClientConnPoolConfig) *ClientConnPool

+ func (c *ClientConnPool) ClientConn(datacenter string) (*grpc.ClientConn, error)

+ func (c *ClientConnPool) ClientConnLeader() (*grpc.ClientConn, error)

+ func (c *ClientConnPool) SetGatewayResolver(gatewayResolver func(string) string)

+ type ClientConnPoolConfig struct

+ ALPNWrapper ALPNWrapper

+ DialingFromDatacenter string

+ DialingFromServer bool

+ Servers ServerLocator

+ SrcAddr *net.TCPAddr

+ TLSWrapper TLSWrapper

+ UseTLSForDC func(dc string) bool

+ type Handler struct

+ func NewHandler(logger Logger, addr net.Addr, register func(server *grpc.Server)) *Handler

+ func (h *Handler) Handle(conn net.Conn)

+ func (h *Handler) Run() error

+ func (h *Handler) Shutdown() error

+ type Logger interface

+ Error func(string, ...interface{})

+ type NoOpHandler struct

+ Logger Logger

+ func (h NoOpHandler) Handle(conn net.Conn)

+ func (h NoOpHandler) Run() error

+ func (h NoOpHandler) Shutdown() error

+ type ServerLocator interface

+ Authority func() string

+ ServerForGlobalAddr func(globalAddr string) (*metadata.Server, error)

+ type TLSWrapper func(dc string, conn net.Conn) (net.Conn, error)

Jan 26, 2023 GO-2023-1827

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul