PT-2023-2032 · Hashicorp+1 · Nomad Enterprise+2

Published 2023-02-15 · Updated 2025-05-26 · CVE-2023-0821

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions HashiCorp Nomad and Nomad Enterprise versions 1.2.15 through 1.3.8 HashiCorp Nomad and Nomad Enterprise version 1.4.3

Description The issue is related to excessive disk usage caused by a maliciously compressed artifact stanza source in jobs. This can lead to a denial of service. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Technical details about exploitation include the use of a maliciously compressed artifact stanza source, which can cause excessive disk usage.

Recommendations For HashiCorp Nomad and Nomad Enterprise versions 1.2.15 through 1.3.8, update to version 1.2.16 or 1.3.9. For HashiCorp Nomad and Nomad Enterprise version 1.4.3, update to version 1.4.4. As a temporary workaround, consider restricting the use of compressed artifact stanza sources in jobs to minimize the risk of exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-409

CWE-400

Related Identifiers

BDU:2023-01744

CVE-2023-0821

GHSA-W479-W22G-CFFH

GO-2023-1581

Affected Products

Hashicorp Nomad

Nomad Enterprise

Red Os

References · 15

• https://osv.dev/vulnerability/UBUNTU-CVE-2023-0821 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2023-1581 · Vendor Advisory
• https://discuss.hashicorp.com/t/hcsec-2023-05-nomad-client-vulnerable-to-decompression-bombs-in-artifact-block/50292 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0821 · Security Note
• https://osv.dev/vulnerability/GHSA-w479-w22g-cffh · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-0821 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01744 · Security Note
• https://ubuntu.com/security/CVE-2023-0821 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-0821 · Vendor Advisory
• https://t.me/cibsecurity/58410 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nomad-260525 · Note
• https://t.me/cvenotify/44534 · Telegram Post
• https://github.com/advisories/GHSA-w479-w22g-cffh · Note
• https://t.me/cvenotify/44995 · Telegram Post