CVE-2023-0821
Nomad Client Vulnerable to Decompression Bombs in Artifact Block
Summary
Nomad Client Vulnerable to Decompression Bombs in Artifact Block
Original description
The description as published by the source.
HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com