CVE-2022-24685

HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage

published February 28, 2022

CVSS
—
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01548 · 74.8th percentile
Published
2022-02-28T13:26Z
EPSS history
Timeline
  • 28 FEB 13:26Z
    HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage
    cvelistv5