CVE-2024-7625CWE-610

Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking

Medium · published August 14, 2024

CVSS v3.1
5.8
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.8th percentile
Weakness
CWE-610 · Externally Controlled Reference to a Resource in Another Sphere
Published
2024-08-14T23:20Z
EPSS history
Timeline
  • 14 AUG 23:20Z
    Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking
    cvelistv5