Vulnerability · Published Aug 14, 2024 · Assigned by HashiCorp
CVE-2024-7625Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking
Medium 5.8
In plain English
A medium-severity security flaw in Nomad from HashiCorp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/hashicorp/nomad | 1.6.14 | GHSA-25qx-vfw2-fw8r |
| Go | github.com/hashicorp/nomad | 1.7.11 | GHSA-25qx-vfw2-fw8r |
| Go | github.com/hashicorp/nomad | 1.8.3 | GHSA-25qx-vfw2-fw8r |
| Go | github.com/hashicorp/nomad | 1.8.3 | GO-2024-3073 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HashiCorp | Nomad | 0.6.1 – before 1.8.3 |
| HashiCorp | Nomad Enterprise | 0.6.1 – before 1.8.3 |
Weakness: CWE-610 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N