Shared Library
Monthly
Memory exhaustion in HashiCorp memberlist before 0.6.0 allows network-accessible attackers to crash individual cluster nodes by sending crafted push/pull state synchronization messages to the gossip port, triggering unbounded memory allocation until the process terminates. The vulnerability is rooted in missing resource limits on incoming gossip state payloads (CWE-770). No public exploit code exists and CISA KEV listing is not confirmed; however, because memberlist underpins HashiCorp Consul, Nomad, and Vault cluster communication, a single exploitable node crash can disrupt distributed coordination in dependent systems.
Arbitrary file read and write on the Nomad client host is achievable through a symlink attack in HashiCorp Nomad's exec2 task driver prior to version 0.1.2. An attacker operating as the Nomad process user with high local privileges can exploit CWE-59 link-following behavior to redirect file operations outside the intended task sandbox, reading or writing arbitrary files on the underlying host. No public exploit code has been identified and CISA has not added this to the Known Exploited Vulnerabilities catalog, but the integrity impact is significant given the scope change to the host system.
Memory exhaustion in HashiCorp memberlist before 0.6.0 allows network-accessible attackers to crash individual cluster nodes by sending crafted push/pull state synchronization messages to the gossip port, triggering unbounded memory allocation until the process terminates. The vulnerability is rooted in missing resource limits on incoming gossip state payloads (CWE-770). No public exploit code exists and CISA KEV listing is not confirmed; however, because memberlist underpins HashiCorp Consul, Nomad, and Vault cluster communication, a single exploitable node crash can disrupt distributed coordination in dependent systems.
Arbitrary file read and write on the Nomad client host is achievable through a symlink attack in HashiCorp Nomad's exec2 task driver prior to version 0.1.2. An attacker operating as the Nomad process user with high local privileges can exploit CWE-59 link-following behavior to redirect file operations outside the intended task sandbox, reading or writing arbitrary files on the underlying host. No public exploit code has been identified and CISA has not added this to the Known Exploited Vulnerabilities catalog, but the integrity impact is significant given the scope change to the host system.