CVE-2023-0821
Nomad Client Vulnerable to Decompression Bombs in Artifact Block
Résumé
Nomad Client Vulnerable to Decompression Bombs in Artifact Block
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com