GO-2024-3246
- Source
- https://pkg.go.dev/vuln/GO-2024-3246
- Import Source
- https://vuln.go.dev/ID/GO-2024-3246.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GO-2024-3246
- Aliases
- Published
- 2024-11-01T21:56:16Z
- Modified
- 2024-11-02T07:57:12.925501Z
- Summary
- Hashicorp Vault vulnerable to denial of service through memory exhaustion in github.com/hashicorp/vault
- Details
-
Hashicorp Vault vulnerable to denial of service through memory exhaustion in github.com/hashicorp/vault
- Database specific
{ "url": "https://pkg.go.dev/vuln/GO-2024-3246", "review_status": "UNREVIEWED" }- References
-
- https://github.com/advisories/GHSA-g233-2p4r-3q7v
- https://nvd.nist.gov/vuln/detail/CVE-2024-8185
- https://github.com/hashicorp/vault/commit/195dfca433028887973f5bd82d173d91fe9dab4a
- https://discuss.hashicorp.com/t/hcsec-2024-26-vault-vulnerable-to-denial-of-service-through-memory-exhaustion-when-processing-raft-cluster-join-requests/71047
Affected packages
Go / github.com/hashicorp/vault
Package
- Name
- github.com/hashicorp/vault
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/hashicorp/vault