CVEvulnerability
CVE-2022-24685
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-02-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-770
Description
HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.
Affected configurations
• hashicorp nomad (>= 1.0.0 <= 1.0.17)
• hashicorp nomad (>= 1.1.0 < 1.1.12)
• hashicorp nomad (>= 1.2.0 < 1.2.6)
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://discuss.hashicorp.com Product, Vendor Advisory
- https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/ discuss.hashicorp.com
- https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/35561 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220331-0007/ Third Party Advisory
- https://discuss.hashicorp.com Product, Vendor Advisory
- https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/ discuss.hashicorp.com
- https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/35561 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220331-0007/ Third Party Advisory