Vulnerabilities > CVE-2023-5954 - Memory Leak vulnerability in Hashicorp Vault

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
hashicorp
CWE-401
NVD
Published: 2023-11-09
Updated: 2024-11-21

Summary

HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10.

Vulnerable Configurations

Part Description Count
Application
Hashicorp
8

Common Weakness Enumeration (CWE)

References