CVE-2023-3774

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-3774
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3774.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-3774
Aliases
Published
2023-07-28T00:45:04.379Z
Modified
2026-07-08T06:49:35.131417087Z
Severity
  • 4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Vault Enterprise Namespace Creation May Lead to Denial of Service
Details

An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3774.json",
    "cna_assigner": "HashiCorp",
    "cwe_ids": [
        "CWE-248"
    ],
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.14.0"
                },
                {
                    "last_affected": "1.14.0"
                },
                {
                    "introduced": "1.13.4"
                },
                {
                    "last_affected": "1.13.4"
                },
                {
                    "introduced": "1.12.8"
                },
                {
                    "last_affected": "1.12.8"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/hashicorp/vault

Affected ranges

Type
GIT
Repo
https://github.com/hashicorp/vault
Events
Introduced
757bf02d67a0cb4030944dbac61b03550c390c26
Last affected
13a649f860186dffe3f3a4459814d87191efc321
Database specific 
{
    "cpe": [
        "cpe:2.3:a:hashicorp:vault:1.12.8:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:hashicorp:vault:1.13.4:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:hashicorp:vault:1.14.0:*:*:*:enterprise:*:*:*"
    ],
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "1.12.8"
        },
        {
            "last_affected": "1.12.8"
        },
        {
            "introduced": "1.13.4"
        },
        {
            "last_affected": "1.13.4"
        },
        {
            "introduced": "1.14.0"
        },
        {
            "last_affected": "1.14.0"
        }
    ]
}

Affected versions

1.*
1.12.8
1.13.4
1.14.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3774.json"