CVE-2024-1329
2 advisories.
Go/github.com/hashicorp/nomad CVE-2024-1329: high 7.7
HashiCorp Nomad vulnerable to symlink attacks
Action: Upgrade github.com/hashicorp/nomad to 1.5.14 or later.
go get github.com/hashicorp/nomad@v1.5.14go get github.com/hashicorp/nomad@v1.6.7go get github.com/hashicorp/nomad@v1.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.13 | 1.5.14 | - |
| 1.6.0 | 1.6.7 | - |
| 1.7.3 | 1.7.4 | - |
Fixed versions
| 1.5.14 | 1.6.7 | 1.7.4 |
Sources
- osv: GHSA-c866-8gpw-p3mv
- https://nvd.nist.gov/vuln/detail/CVE-2024-1329
- https://github.com/hashicorp/nomad/issues/19888
- https://github.com/hashicorp/nomad/commit/b3209cbc6921e703b0e9984ce70c10b378665834
- https://github.com/hashicorp/nomad/commit/d1721c7a6fc1833778086603f818a822a34f445a
- https://github.com/hashicorp/nomad/commit/de55da677a21ac7572c0f4a8cd9abd5473c47a70
- https://discuss.hashicorp.com/t/hcsec-2024-03-nomad-vulnerable-to-arbitrary-write-through-symlink-attack
- https://github.com/hashicorp/nomad
CVE-2024-1329 · published · modified · JSON
Go/github.com/hashicorp/nomad CVE-2024-1329: unknown
Symlink attack in github.com/hashicorp/nomad
Action: Upgrade github.com/hashicorp/nomad to 1.5.14 or later.
go get github.com/hashicorp/nomad@v1.5.14go get github.com/hashicorp/nomad@v1.6.7go get github.com/hashicorp/nomad@v1.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.13 | 1.5.14 | - |
| 1.6.0 | 1.6.7 | - |
| 1.7.3 | 1.7.4 | - |
Fixed versions
| 1.5.14 | 1.6.7 | 1.7.4 |
Sources
- osv: GO-2024-2538
- https://nvd.nist.gov/vuln/detail/CVE-2024-1329
- https://github.com/hashicorp/nomad/issues/19888
- https://github.com/hashicorp/nomad/commit/b3209cbc6921e703b0e9984ce70c10b378665834
- https://github.com/hashicorp/nomad/commit/d1721c7a6fc1833778086603f818a822a34f445a
- https://github.com/hashicorp/nomad/commit/de55da677a21ac7572c0f4a8cd9abd5473c47a70
- https://discuss.hashicorp.com/t/hcsec-2024-03-nomad-vulnerable-to-arbitrary-write-through-symlink-attack
CVE-2024-1329 · published · modified · JSON