CVE-2023-3774: Vault Enterprise Namespace Creation May Lead to Denial of Service

Published Jul 28, 2023

Updated

An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.

Affected Software

3 affected components

HashiCorp Vault=1.12.8

HashiCorp Vault=1.13.4

HashiCorp Vault=1.14.0

Event History

Jul 28, 2023

CVE Published

via MITRE·12:45 AM

Data Sourced

via MITRE·12:45 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-3774?

CVE-2023-3774 is an unhandled error in Vault Enterprise's namespace creation that may cause the Vault process to crash, potentially resulting in denial of service.

What is the severity of CVE-2023-3774?

CVE-2023-3774 has a severity level of medium (4.9).

How does CVE-2023-3774 affect HashiCorp Vault?

CVE-2023-3774 affects HashiCorp Vault versions 1.12.8, 1.13.4, and 1.14.0 in their enterprise editions.

How can I mitigate CVE-2023-3774?

You can mitigate CVE-2023-3774 by upgrading to Vault versions 1.14.1, 1.13.5, or 1.12.9, where the vulnerability is fixed.

Where can I find more information about CVE-2023-3774?

More information about CVE-2023-3774 can be found at the following link: https://discuss.hashicorp.com/t/hcsec-2023-23-vault-enterprise-namespace-creation-may-lead-to-denial-of-service/56617