GitHub Advisoryadvisory · Go

GHSA-77cr-6gr8-7rr9 Use After Free in HashiCorp Nomad

CRITICAL Published 2022-02-15 Modified 2023-10-02 Official page ↗
Aliases
CVE-2020-27195
Ecosystem
Go
Packages
github.com/hashicorp/nomad
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-416
Reviewed
2021-05-12

Affected packages

• Go github.com/hashicorp/nomad: >= 0.9.0, < 0.10.6 → fixed in 0.10.6 • Go github.com/hashicorp/nomad: >= 0.11.0, < 0.11.5 → fixed in 0.11.5 • Go github.com/hashicorp/nomad: >= 0.12.0, < 0.12.6 → fixed in 0.12.6

Description

HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6

Related

Alias · CVE (1)

  • CVE-2020-27195 HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or… vulnerability

Weakness · CWE (1)

References