Headline
GHSA-w479-w22g-cffh: Uncontrolled Resource Consumption in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.
Uncontrolled Resource Consumption in Hashicorp Nomad
Low severity GitHub Reviewed Published Feb 17, 2023 to the GitHub Advisory Database • Updated Feb 17, 2023
Related news
CVE-2023-0821: HCSEC-2023-05 - Nomad Client Vulnerable to Decompression Bombs in Artifact Block
HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.