CVE-2023-0821

Fixed upstream EPSS <1%CVSS 6.5

HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.

Published 2023-02-16 · CVE record · OSV

Products: HashiCorp Nomad, HashiCorp Nomad Enterprise

Fixed upstream

Ecosystem	Package	Fixed in
Go	github.com/hashicorp/nomad	1.2.16
Go	github.com/hashicorp/nomad	1.3.9
Go	github.com/hashicorp/nomad	1.4.4

Distro releases

Release	Package	Fixed in
Ubuntu 18.04 LTS	nomad	no fix
Ubuntu 20.04 LTS	nomad	no fix