CVE-2024-7625
published 2024-08-15CVE-2024-7625: In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the…
PriorityP429medium5.8CVSS 3.1
AVNACHPRHUINSCCNIHAN
EPSS
0.33%
25.1th percentile
In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | hashicorp_nomad | >= 0.6.1 < 1.8.3 | 1.8.3 |
| github.com | hashicorp_nomad | >= 0.6.1 < 1.6.14 | 1.6.14 |
| github.com | hashicorp_nomad | >= 1.7.0 < 1.7.11 | 1.7.11 |
| github.com | hashicorp_nomad | >= 1.8.0 < 1.8.3 | 1.8.3 |
| hashicorp | nomad | >= 0.6.1 < 1.8.3 | 1.8.3 |
| hashicorp | nomad | >= 0.6.1 < 1.6.14 | 1.6.14 |
| hashicorp | nomad | >= 1.7.0 < 1.7.11 | 1.7.11 |
| hashicorp | nomad | >= 1.8.0 < 1.8.3 | 1.8.3 |
| hashicorp | nomad | 1.8.0 – 1.8.3 | — |
| hashicorp | nomad_enterprise | >= 0.6.1 < 1.8.3 | 1.8.3 |
CVSS provenance
nvdv3.15.8MEDIUMCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
ghsa5.8MEDIUM
osv5.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad
osv·2024-08-19
CVE-2024-7625 Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad
Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad
Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad.
NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.
(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)
The additional affected modules and versions are: github.com/hashicorp/nomad from v0.6.1 before v1.6.14, from v1.7.0 before v1.7.11, from v1.8.0 before v1.8.3.
OSV
CVE-2024-7625: In HashiCorp Nomad and Nomad Enterprise from 0
osv·2024-08-15·CVSS 5.8
CVE-2024-7625 [MEDIUM] CVE-2024-7625: In HashiCorp Nomad and Nomad Enterprise from 0
In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.
GHSA
Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking
ghsa·2024-08-15·CVSS 5.8
CVE-2024-7625 [MEDIUM] CWE-610 Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking
Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking
In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.
OSV
Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking
osv·2024-08-15·CVSS 5.8
CVE-2024-7625 [MEDIUM] Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking
Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking
In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-15
Published