CVE-2021-32575: HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node

Medium severity · published Jun 17, 2021

CVE-2021-32575

HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node

6.5

CVSS

0.5%

EPSS

On KEV

Description

HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack vector

Adjacent

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 43% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Nomad · Hashicorp

through 1.0.4; through 1.0.4 · source: NVD

Affected product

Nomad

Hashicorp

All Nomad CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2021-32575

CVE.org

https://www.cve.org/CVERecord?id=CVE-2021-32575

Patch

https://discuss.hashicorp.com/t/hcsec-2021-14-nomad-bridge-networking-mode-allows-arp-spoofing-from-other-bridged-tasks-on-same-node/24296

Product

https://www.hashicorp.com/blog/category/nomad