First published: Fri Jan 31 2020(Updated: )
HashiCorp Nomad and Nomad Enterprise before 0.10.3 allow unbounded resource usage. ### Specific Go Packages Affected github.com/hashicorp/nomad/command/agent
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
go/github.com/hashicorp/nomad | <0.10.3 | 0.10.3 |
HashiCorp Nomad | <0.10.3 | |
HashiCorp Nomad | <0.10.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this security vulnerability is CVE-2020-7218.
The severity of CVE-2020-7218 is high with a severity value of 7.5.
The affected software for CVE-2020-7218 is HashiCorp Nomad (up to 0.10.2) and Nomad Enterprise (up to 0.10.2).
To fix CVE-2020-7218, you need to update to version 0.10.3 of HashiCorp Nomad or Nomad Enterprise.
You can find more information about CVE-2020-7218 on the NIST National Vulnerability Database (NVD) website and the HashiCorp Nomad GitHub repository.