Vulnerability Details CVE-2022-41606
HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash client agents. Fixed in 1.2.13, 1.3.6, and 1.4.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.9%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2022-41606
-
cpe:2.3:a:hashicorp:nomad:1.0.10
-
cpe:2.3:a:hashicorp:nomad:1.0.11
-
cpe:2.3:a:hashicorp:nomad:1.0.12
-
cpe:2.3:a:hashicorp:nomad:1.0.13
-
cpe:2.3:a:hashicorp:nomad:1.0.14
-
cpe:2.3:a:hashicorp:nomad:1.0.17
-
cpe:2.3:a:hashicorp:nomad:1.0.18
-
cpe:2.3:a:hashicorp:nomad:1.0.2
-
cpe:2.3:a:hashicorp:nomad:1.0.3
-
cpe:2.3:a:hashicorp:nomad:1.0.4
-
cpe:2.3:a:hashicorp:nomad:1.0.5
-
cpe:2.3:a:hashicorp:nomad:1.0.6
-
cpe:2.3:a:hashicorp:nomad:1.0.7
-
cpe:2.3:a:hashicorp:nomad:1.0.8
-
cpe:2.3:a:hashicorp:nomad:1.1.0
-
cpe:2.3:a:hashicorp:nomad:1.1.1
-
cpe:2.3:a:hashicorp:nomad:1.1.11
-
cpe:2.3:a:hashicorp:nomad:1.1.12
-
cpe:2.3:a:hashicorp:nomad:1.1.14
-
cpe:2.3:a:hashicorp:nomad:1.1.2
-
cpe:2.3:a:hashicorp:nomad:1.1.3
-
cpe:2.3:a:hashicorp:nomad:1.1.4
-
cpe:2.3:a:hashicorp:nomad:1.1.5
-
cpe:2.3:a:hashicorp:nomad:1.1.6
-
cpe:2.3:a:hashicorp:nomad:1.1.7
-
cpe:2.3:a:hashicorp:nomad:1.1.8
-
cpe:2.3:a:hashicorp:nomad:1.2.0
-
cpe:2.3:a:hashicorp:nomad:1.2.1
-
cpe:2.3:a:hashicorp:nomad:1.2.2
-
cpe:2.3:a:hashicorp:nomad:1.2.5
-
cpe:2.3:a:hashicorp:nomad:1.2.6
-
cpe:2.3:a:hashicorp:nomad:1.2.8
-
cpe:2.3:a:hashicorp:nomad:1.3.0