Поиск уязвимостей
Количество 8
Количество 8
GHSA-6p62-6cg9-f5f5
Memory exhaustion in HashiCorp Vault
CVE-2023-6337
HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of the host when handling large unauthenticated and authenticated HTTP requests from a client. Vault will attempt to map the request to memory, resulting in the exhaustion of available memory on the host, which may cause Vault to crash. Fixed in Vault 1.15.4, 1.14.8, 1.13.12.
CVE-2023-6337
HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of the host when handling large unauthenticated and authenticated HTTP requests from a client. Vault will attempt to map the request to memory, resulting in the exhaustion of available memory on the host, which may cause Vault to crash. Fixed in Vault 1.15.4, 1.14.8, 1.13.12.
CVE-2023-6337
BDU:2023-08660
Уязвимость компонента max_request_duration платформ для архивирования корпоративной информации HashiCorp Vault и Vault Enterprise, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2024-3678
ALT-PU-2024-3678: package `vault` update to version 1.13.12-alt2
ALT-PU-2024-3459
ALT-PU-2024-3459: package `vault` update to version 1.13.12-alt1
ROS-20240805-04
Множественные уязвимости vault
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-6p62-6cg9-f5f5 Memory exhaustion in HashiCorp Vault | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
 | CVE-2023-6337 HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of the host when handling large unauthenticated and authenticated HTTP requests from a client. Vault will attempt to map the request to memory, resulting in the exhaustion of available memory on the host, which may cause Vault to crash. Fixed in Vault 1.15.4, 1.14.8, 1.13.12. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
 | CVE-2023-6337 HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of the host when handling large unauthenticated and authenticated HTTP requests from a client. Vault will attempt to map the request to memory, resulting in the exhaustion of available memory on the host, which may cause Vault to crash. Fixed in Vault 1.15.4, 1.14.8, 1.13.12. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
 | CVSS3: 7.5 | 1% Низкий | около 2 лет назад | |
 | BDU:2023-08660 Уязвимость компонента max_request_duration платформ для архивирования корпоративной информации HashiCorp Vault и Vault Enterprise, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| ALT-PU-2024-3678 ALT-PU-2024-3678: package `vault` update to version 1.13.12-alt2 | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-3459 ALT-PU-2024-3459: package `vault` update to version 1.13.12-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
 | ROS-20240805-04 Множественные уязвимости vault | CVSS3: 8.1 | больше 2 лет назад |
Уязвимостей на страницу