CVE-2021-41865 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Low
Remote	Yes
Type	Denial of service
Description	HashiCorp Nomad 1.1.1 through 1.1.5 allowed authenticated users with job submission capabilities to cause denial of service by submitting incomplete job specifications with a Consul mesh gateway and host networking mode.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-2451	nomad	1.1.5-1	1.1.6-1	Low	Fixed

References
https://discuss.hashicorp.com/t/hcsec-2021-26-nomad-denial-of-service-via-submission-of-incomplete-job-specification-using-consul-mesh-gateway-host-network/30311 https://github.com/hashicorp/nomad/pull/11257 https://github.com/hashicorp/nomad/commit/3c1aaf9b7c8af3abd330d92ad724f16b6c5c9d60

References

https://discuss.hashicorp.com/t/hcsec-2021-26-nomad-denial-of-service-via-submission-of-incomplete-job-specification-using-consul-mesh-gateway-host-network/30311
https://github.com/hashicorp/nomad/pull/11257
https://github.com/hashicorp/nomad/commit/3c1aaf9b7c8af3abd330d92ad724f16b6c5c9d60