CVE-2022-24686
EUVD-2022-102414.02.2022, 14:15
HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. Fixed in 1.0.18, 1.1.12, and 1.2.6
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| hashicorp | nomad | 0.3.0 ≤ 𝑥 < 1.0.18 |
| hashicorp | nomad | 0.3.0 ≤ 𝑥 < 1.0.18 |
| hashicorp | nomad | 1.1.0 ≤ 𝑥 < 1.1.12 |
| hashicorp | nomad | 1.1.0 ≤ 𝑥 < 1.1.12 |
| hashicorp | nomad | 1.2.0 ≤ 𝑥 < 1.2.6 |
| hashicorp | nomad | 1.2.0 ≤ 𝑥 < 1.2.6 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References