Vulnerability Details CVE-2022-24685
HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 75.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2022-24685
-
cpe:2.3:a:hashicorp:nomad:1.0.0
-
cpe:2.3:a:hashicorp:nomad:1.0.1
-
cpe:2.3:a:hashicorp:nomad:1.0.10
-
cpe:2.3:a:hashicorp:nomad:1.0.11
-
cpe:2.3:a:hashicorp:nomad:1.0.12
-
cpe:2.3:a:hashicorp:nomad:1.0.13
-
cpe:2.3:a:hashicorp:nomad:1.0.14
-
cpe:2.3:a:hashicorp:nomad:1.0.17
-
cpe:2.3:a:hashicorp:nomad:1.0.2
-
cpe:2.3:a:hashicorp:nomad:1.0.3
-
cpe:2.3:a:hashicorp:nomad:1.0.4
-
cpe:2.3:a:hashicorp:nomad:1.0.5
-
cpe:2.3:a:hashicorp:nomad:1.0.6
-
cpe:2.3:a:hashicorp:nomad:1.0.7
-
cpe:2.3:a:hashicorp:nomad:1.0.8
-
cpe:2.3:a:hashicorp:nomad:1.1.0
-
cpe:2.3:a:hashicorp:nomad:1.1.1
-
cpe:2.3:a:hashicorp:nomad:1.1.11
-
cpe:2.3:a:hashicorp:nomad:1.1.2
-
cpe:2.3:a:hashicorp:nomad:1.1.3
-
cpe:2.3:a:hashicorp:nomad:1.1.4
-
cpe:2.3:a:hashicorp:nomad:1.1.5
-
cpe:2.3:a:hashicorp:nomad:1.1.6
-
cpe:2.3:a:hashicorp:nomad:1.1.7
-
cpe:2.3:a:hashicorp:nomad:1.1.8
-
cpe:2.3:a:hashicorp:nomad:1.2.0
-
cpe:2.3:a:hashicorp:nomad:1.2.1
-
cpe:2.3:a:hashicorp:nomad:1.2.2
-
cpe:2.3:a:hashicorp:nomad:1.2.5