Sandbox Escape

2020-11-2501:22:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

30.8%

JSON

github.com/hashicorp/nomad is vulnerable to sandbox escape. The vulnerability exists through docker.volumes.enabled flag is not explicitly disabled or when using a volume mount type, subverts the default Docker file sandbox feature.

CPENameOperatorVersion
github.com/hashicorp/nomadle0.12.7
github.com/hashicorp/nomadle0.10.7
github.com/hashicorp/nomadle0.11.7
nomad:sideq0.10.5+dfsg1-3
nomad:bullseyeeq0.10.5+dfsg1-3
nomadeq0.10.3-r1
nomadeq0.10.3-r0
nomadeq0.11.2-r1

Name	Operator	Version
github.com/hashicorp/nomad	le	0.12.7
github.com/hashicorp/nomad	le	0.10.7
github.com/hashicorp/nomad	le	0.11.7
nomad:sid	eq	0.10.5+dfsg1-3
nomad:bullseye	eq	0.10.5+dfsg1-3
nomad	eq	0.10.3-r1
nomad	eq	0.10.3-r0
nomad	eq	0.11.2-r1