HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.
2022-02-28T14:15:08.497
2024-11-21T06:50:52.413
Modified
CVSSv3.1: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | hashicorp | nomad | ≤ 1.0.17 | Yes |
Application | hashicorp | nomad | ≤ 1.0.17 | Yes |
Application | hashicorp | nomad | < 1.1.12 | Yes |
Application | hashicorp | nomad | < 1.1.12 | Yes |
Application | hashicorp | nomad | < 1.2.6 | Yes |
Application | hashicorp | nomad | < 1.2.6 | Yes |