GitHub Advisoryadvisory · Go

GHSA-w479-w22g-cffh Uncontrolled Resource Consumption in Hashicorp Nomad

MEDIUM Published 2023-02-17 Modified 2023-02-28 Official page ↗
Aliases
CVE-2023-0821
Ecosystem
Go
Packages
github.com/hashicorp/nomad
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2023-02-17

Affected packages

• Go github.com/hashicorp/nomad: >= 1.2.15, < 1.2.16 → fixed in 1.2.16 • Go github.com/hashicorp/nomad: >= 1.3.0, < 1.3.9 → fixed in 1.3.9 • Go github.com/hashicorp/nomad: >= 1.4.0, < 1.4.4 → fixed in 1.4.4

Description

HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.

Related

Alias · CVE (1)

  • CVE-2023-0821 HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References