NetSight
IP …
medium6.5

CVE-2022-41606

HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash cli…

Impact

HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash client agents. Fixed in 1.2.13, 1.3.6, and 1.4.0.

Affected products

VendorProductAffected versions
HashicorpNomad
from 1.0.2 before 1.2.13
from 1.3.0 before 1.3.6

Weakness classification

CWE-20

References