NetSight
IP …
high7.5

CVE-2022-24685

HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage.

Impact

HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.

Affected products

VendorProductAffected versions
HashicorpNomad
from 1.0.0 through 1.0.17
from 1.1.0 before 1.1.12
from 1.2.0 before 1.2.6

Weakness classification

CWE-770

References