CVE-2021-32575 | BDVDB-2026-155609 Detail

Description#

HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.hashicorp.com/blog/category/nomad
https://discuss.hashicorp.com/t/hcsec-2021-14-nomad-bridge-networking-mode-allows-arp-spoofing-from-other-bridged-tasks-on-same-node/24296

Exploit#

No public exploit known

History#

Version 12021-06-17Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.