CVE-2023-5954
Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
Résumé
Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.13.7"},{"fixed":"1.13.10"},{"introduced":"1.14.3"},{"fixed":"1.14.6"},{"introduced":"1.15.0"},{"fixed":"1.15.2"}]}]
Références
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web discuss.hashicorp.com