Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2022-24685

HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
hashicorp / nomad 1.2.0 1.2.6
hashicorp / nomad 1.1.0 1.1.12
hashicorp / nomad 1.0.0 1.0.17.x
Go icon github.com/hashicorp/nomad 1.0.0 1.0.17
Go icon github.com/hashicorp/nomad 1.1.0 1.1.12
Go icon github.com/hashicorp/nomad 1.2.0 1.2.6