CVE-2023-3774
Assigner: HashiCorp
Published: 2023-07-28T00:45:04.379Z
State: PUBLISHED
title: Vault Enterprise Namespace Creation May Lead to Denial of Service
problemTypes: descriptions: cweId: CWE-703
description: CWE-703: Improper Check or Handling of Exceptional Conditions
type: CWE
affected: vendor: HashiCorp
product: Vault Enterprise
platforms: Windows
MacOS
Linux
x86
ARM
64 bit
32 bit
versions: status: affected
version: 1.14.0
status: affected
version: 1.13.4
status: affected
version: 1.12.8
defaultStatus: unaffected
descriptions: value: An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.
supportingMedia: type: text/html
base64: no
value: An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseSeverity: MEDIUM
baseScore: 4.9
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
source: discovery: INTERNAL