CVE-2023-5954
Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
Summary
Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
Original description
The description as published by the source.
HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.13.7"},{"fixed":"1.13.10"},{"introduced":"1.14.3"},{"fixed":"1.14.6"},{"introduced":"1.15.0"},{"fixed":"1.15.2"}]}]
References
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web discuss.hashicorp.com