Go/github.com/hashicorp/nomad CVE-2021-32575: medium 6.5, EPSS 0.51%
Improper network isolation in Hashicorp Nomad
Action: Upgrade github.com/hashicorp/nomad to 0.12.12 or later.
go get github.com/hashicorp/nomad@v1.0.5go get github.com/hashicorp/nomad@v0.12.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.5 | - |
| 0 | 0.12.12 | - |
Fixed versions
| 1.0.5 | 0.12.12 |
Sources
- osv: GHSA-vf6q-9f2f-mwhv
- https://nvd.nist.gov/vuln/detail/CVE-2021-32575
- https://discuss.hashicorp.com/t/hcsec-2021-14-nomad-bridge-networking-mode-allows-arp-spoofing-from-other-bridged-tasks-on-same-node/24296
- https://www.hashicorp.com/blog/category/nomad
CVE-2021-32575 · published · modified · JSON