HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and     were susceptible to unauthenticated denial of service. Fixed in 0.10.3. (CVE-2020-7218)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and
    were susceptible to unauthenticated denial of service. Fixed in 0.10.3. (CVE-2020-7218)

ID	Name	Product	Family	Severity
263024	Linux Distros Unpatched Vulnerability : CVE-2020-7218	Nessus	Misc.	high
415447	SCA: security update for github.com/hashicorp/nomad (GHSA-h43v-26r7-7j4c)	Tenable Cloud Security	SCA Checks	high
415447	SCA: security update for github.com/hashicorp/nomad (GHSA-h43v-26r7-7j4c)	Tenable Self-Hosted Container Security	SCA Checks	high
405854	Alpine: nomad: security update to 0.10.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405854	Alpine: nomad: security update to 0.10.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2020-7218

high

Tenable Plugins

high

high

high

high

high