CVE-2020-27195

CRITICAL9.1EPSS 0.31%

Use After Free in HashiCorp Nomad

Published: 2/15/2022Modified: 8/21/2024

Also known as:GHSA-77cr-6gr8-7rr9GO-2022-0806

Description

HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6

Affected packages (2)

Go/github.com/hashicorp/nomad>= 0.9.0, < 0.10.6
Go/github.com/hashicorp/nomad>= 0.9.0, < 0.10.6, >= 0.11.0, < 0.11.5, >= 0.12.0, < 0.12.6

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	CRITICAL9.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References (7)

ADVISORYhttps://github.com/advisories/GHSA-77cr-6gr8-7rr9
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-27195
PATCHhttps://pkg.go.dev/github.com/hashicorp/nomad/client/allocrunner/taskrunner/template
WEBhttps://github.com/hashicorp/nomad/blob/master/CHANGELOG.md#0126-october-21-2020
WEBhttps://github.com/hashicorp/nomad/issues/9129
WEBhttps://github.com/hashicorp/nomad/pull/9139
WEBhttps://www.nomadproject.io/downloads