Executive brief
Hashicorp Vault vulnerable to denial of service through memory exhaustion in github.com/hashicorp/vault
Affected products
- Go github.com/openbao/openbao
- Go github.com/hashicorp/vault
Junglewise Threat Intelligence
CVE-2024-8185: GO-2024-3246 - Hashicorp Vault vulnerable to denial of service through memory exhaustion in github.com/hashicorp/vault
CVE-2024-8185 · Severity: low · CVSS 3.1 · Published 2024-11-01
Technologies: github.com/openbao/openbao (Go), github.com/hashicorp/vault (Go). Vendors: Go.
Related threats
- OpenBao Kerberos auth method orphaned token accumulation
- OpenBao sensitive information disclosure in audit logs
- OpenBao authorization bypass in sys/revoke and sys/renew endpoints
- OpenBao improper data removal during namespace deletion retry
- OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation