CVE-2021-41865: Medium severity HashiCorp Nomad vulnerability
HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job submission capabilities to cause denial of service by submitting incomplete job specifications with a Consul mesh gateway and host networking mode. Fixed in 1.1.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HashiCorp Nomad and Nomad Enterpriseto a version that resolves this vulnerability.Fixed in 1.1.6
Event History
Frequently Asked Questions
What is CVE-2021-41865?
CVE-2021-41865 is a vulnerability in HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 that allows authenticated users to cause denial of service by submitting incomplete job specifications.
How severe is CVE-2021-41865?
CVE-2021-41865 has a severity score of 6.5, which is considered medium.
Which versions of HashiCorp Nomad and Nomad Enterprise are affected by CVE-2021-41865?
HashiCorp Nomad and Nomad Enterprise versions 1.1.1 through 1.1.5 are affected by CVE-2021-41865.
How can CVE-2021-41865 be fixed?
CVE-2021-41865 can be fixed by updating HashiCorp Nomad and Nomad Enterprise to version 1.1.6.
Where can I find more information about CVE-2021-41865?
More information about CVE-2021-41865 can be found at the following link: [https://discuss.hashicorp.com/t/hcsec-2021-26-nomad-denial-of-service-via-submission-of-incomplete-job-specification-using-consul-mesh-gateway-host-network/30311](https://discuss.hashicorp.com/t/hcsec-2021-26-nomad-denial-of-service-via-submission-of-incomplete-job-specification-using-consul-mesh-gateway-host-network/30311)