CVE-2023-5954 (published 2023-11-09T20:13:49.346Z)
HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10.
Affected products: Vendor: HashiCorp
Product: Vault
Versions: 1.15.0, 1.15.1, 1.14.3, 1.14.4, 1.14.5, 1.13.7, 1.13.8, 1.13.9