x/vulndb: potential Go vuln in github.com/hashicorp/consul/agent/config: GHSA-rqjq-mrgx-85hp

[GoVulnBot]

In GitHub Security Advisory GHSA-rqjq-mrgx-85hp, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/hashicorp/consul/agent/config	1.7.4	>= 1.7.0, < 1.7.4

Cross references:

• CVE-2020-13250 appears in issue x/vulndb: potential Go vuln in github.com/hashicorp/consul/agent/config: GHSA-rqjq-mrgx-85hp #879 NOT_IMPORTABLE
• GHSA-rqjq-mrgx-85hp appears in issue x/vulndb: potential Go vuln in github.com/hashicorp/consul/agent/config: GHSA-rqjq-mrgx-85hp #879 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - introduced: 1.7.0
        fixed: 1.7.4
    packages:
      - package: github.com/hashicorp/consul/agent/config
  - module: TODO
    versions:
      - introduced: 1.2.0
        fixed: 1.6.6
    packages:
      - package: github.com/hashicorp/consul/agent/config
description: HashiCorp Consul and Consul Enterprise include an HTTP API (introduced
    in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to
    denial of service. Fixed in 1.6.6 and 1.7.4.
cves:
  - CVE-2020-13250
ghsas:
  - GHSA-rqjq-mrgx-85hp

[tatianab]

Duplicate of #879