PT-2021-4118 · Hashicorp · Hashicorp Nomad+1

Published 2021-05-12 · Updated 2024-08-21 · CVE-2021-32575

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions HashiCorp Nomad and Nomad Enterprise versions 1.0.4 and earlier

Description The issue is related to an error in bridge networking mode, allowing ARP spoofing from other bridged tasks on the same node. This could potentially allow a remote attacker to impact data integrity.

Recommendations For HashiCorp Nomad and Nomad Enterprise versions 1.0.4 and earlier, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting network access to minimize the risk of exploitation.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-1100

CWE-451

Related Identifiers

BDU:2021-04708

CVE-2021-32575

GHSA-VF6Q-9F2F-MWHV

GO-2022-0709

Affected Products

Hashicorp Nomad

Nomad Enterprise

References · 13

• https://security-tracker.debian.org/tracker/CVE-2021-32575 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04708 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-32575 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-32575 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-32575 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32575 · Vendor Advisory
• https://discuss.hashicorp.com/t/hcsec-2021-14-nomad-bridge-networking-mode-allows-arp-spoofing-from-other-bridged-tasks-on-same-node/24296 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0709 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32575 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vf6q-9f2f-mwhv · Vendor Advisory
• https://t.me/cibsecurity/25530 · Telegram Post
• https://hashicorp.com/blog/category/nomad · Note
• https://github.com/advisories/GHSA-vf6q-9f2f-mwhv · Note