CVE-2023-5954
Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
概要
Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.13.7"},{"fixed":"1.13.10"},{"introduced":"1.14.3"},{"fixed":"1.14.6"},{"introduced":"1.15.0"},{"fixed":"1.15.2"}]}]
参照URL
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web discuss.hashicorp.com