Lucene search

K
cvelistHashiCorpCVELIST:CVE-2023-0821
HistoryFeb 16, 2023 - 9:23 p.m.

CVE-2023-0821 Nomad Client Vulnerable to Decompression Bombs in Artifact Block

2023-02-1621:23:24
CWE-409
HashiCorp
raw.githubusercontent.com
1

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.9%

HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.9%