CVE-2020-7218: Allocation of Resources Without Limits or Throttling

May 18, 2021 (updated September 29, 2023)

HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3.

References

github.com/advisories/GHSA-h43v-26r7-7j4c
github.com/hashicorp/nomad/issues/7002
github.com/hashicorp/nomad/pull/7022
nvd.nist.gov/vuln/detail/CVE-2020-7218
www.hashicorp.com/blog/category/nomad/

Code Behaviors & Features

Detect and mitigate CVE-2020-7218 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →