HashiCorp Nomad/Nomad Enterprise up to 1.8.2/1.7.10/1.6.13 Archive Header external reference

Summaryinfo

A vulnerability was found in HashiCorp Nomad and Nomad Enterprise up to 1.8.2/1.7.10/1.6.13. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Archive Header Handler. The manipulation leads to external reference. This vulnerability is referenced as CVE-2024-7625. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in HashiCorp Nomad and Nomad Enterprise up to 1.8.2/1.7.10/1.6.13. It has been rated as problematic. This issue affects an unknown function of the component Archive Header Handler. The manipulation with an unknown input leads to a external reference vulnerability. Using CWE to declare the problem leads to CWE-610. The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.

It is possible to read the advisory at discuss.hashicorp.com. The identification of this vulnerability is CVE-2024-7625 since 08/08/2024. The exploitation is known to be difficult. The attack may be initiated remotely. The exploitation requires an enhanced level of successful authentication. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 1.6.14, 1.7.11 or 1.8.3 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• HashiCorp

Name

• Nomad
• Nomad Enterprise

Version

• 1.6.0
• 1.6.1
• 1.6.2
• 1.6.3
• 1.6.4
• 1.6.5
• 1.6.6
• 1.6.7
• 1.6.8
• 1.6.9
• 1.6.10
• 1.6.11
• 1.6.12
• 1.6.13
• 1.7.0
• 1.7.1
• 1.7.2
• 1.7.3
• 1.7.4
• 1.7.5
• 1.7.6
• 1.7.7
• 1.7.8
• 1.7.9
• 1.7.10
• 1.8.0
• 1.8.1
• 1.8.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion