CVEvulnerability

CVE-2023-3774

4.9 MEDIUM Published 2023-07-28 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2023-07-28
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected]): 4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-248, CWE-755

Description

An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.

Affected configurations

• hashicorp vault 1.12.8 • hashicorp vault 1.13.4 • hashicorp vault 1.14.0

Weakness · CWE (2)

CWE-248 Uncaught Exception weakness
CWE-755 Improper Handling of Exceptional Conditions weakness

References

https://discuss.hashicorp.com/t/hcsec-2023-23-vault-enterprise-namespace-creation-may-lead-to-denial-of-service/56617 Vendor Advisory
https://discuss.hashicorp.com/t/hcsec-2023-23-vault-enterprise-namespace-creation-may-lead-to-denial-of-service/56617 Vendor Advisory

CVE-2023-3774

Description

Affected configurations

Related

Weakness · CWE (2)

References