CVE-2020-7218 - HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service

Back Back to CVE browser

HIGH

HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service

Published Jan 31, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.47%

Description

HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3.

Affected products

Ecosystem	Package	Introduced	Fixed
Go	github.com/hashicorp/nomad	0	0.10.3

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-770

Allocation of Resources Without Limits

References (5)

https://github.com/advisories/GHSA-h43v-26r7-7j4c
Advisory
https://github.com/hashicorp/nomad/issues/7002
x_refsource_MISCIssue TrackingMitigationThird Party Advisory
https://github.com/hashicorp/nomad/pull/7022
https://nvd.nist.gov/vuln/detail/CVE-2020-7218
https://www.hashicorp.com/blog/category/nomad/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-h43v-26r7-7j4c		Advisory
https://github.com/hashicorp/nomad/issues/7002		x_refsource_MISCIssue TrackingMitigationThird Party Advisory
https://github.com/hashicorp/nomad/pull/7022
https://nvd.nist.gov/vuln/detail/CVE-2020-7218
https://www.hashicorp.com/blog/category/nomad/		x_refsource_MISCVendor Advisory