GHSA-3382-r9q8-4hfgHighCVSS 7.5
HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling
🔗 CVE IDs covered (1)
📋 Description
HashiCorp Nomad and Nomad Enterprise 1.x before 1.0.17, 1.1.x before 1.1.12, and 1.2.x before 1.2.6 is vulnerable to Allocation of Resources Without Limits or Throttling.
🎯 Affected products3
- go/github.com/hashicorp/nomad:>= 1.0.0, < 1.0.17
- go/github.com/hashicorp/nomad:>= 1.1.0, < 1.1.12
- go/github.com/hashicorp/nomad:>= 1.2.0, < 1.2.6
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2022-24685
- https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/35561
- https://discuss.hashicorp.com
- https://security.netapp.com/advisory/ntap-20220331-0007/
- https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/
- https://github.com/advisories/GHSA-3382-r9q8-4hfg