[Git][security-tracker-team/security-tracker][master] Add CVE-2022-24685/nomad

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Mar 3 06:54:01 GMT 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ceabc557 by Salvatore Bonaccorso at 2022-03-03T07:53:37+01:00
Add CVE-2022-24685/nomad

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4352,7 +4352,8 @@ CVE-2022-24686 (HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.1
 	- nomad <unfixed>
 	NOTE: https://discuss.hashicorp.com/t/hcsec-2022-01-nomad-artifact-download-race-condition/35559
 CVE-2022-24685 (HashiCorp Nomad and Nomad Enterprise 1.x before 1.0.17, 1.1.x before 1 ...)
-	TODO: check
+	- nomad <undetermined>
+	NOTE: https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/35561
 CVE-2022-24684 (HashiCorp Nomad and Nomad Enterprise before 1.0.17, 1.1.x before 1.1.1 ...)
 	- nomad <undetermined>
 	NOTE: https://discuss.hashicorp.com/t/hcsec-2022-04-nomad-spread-job-stanza-may-trigger-panic-in-servers/35562



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ceabc557b8421c5effacb71c2c713706999f52e1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ceabc557b8421c5effacb71c2c713706999f52e1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220303/78f1fe5a/attachment.htm>


More information about the debian-security-tracker-commits mailing list