CVE-2023-3774

MEDIUM

Hashicorp Vault - Improper Exception Handling

Title source: rule

Description

An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.

References (1)

[Vendor Advisory] https://discuss.hashicorp.com/t/hcsec-2023-23-vault-enterprise-namespace-creation-may-lead-to-denial-of-service/56617

Scores

CVSS v3 4.9

EPSS 0.0052

EPSS Percentile 66.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-755 CWE-248

Status published

Products (3)

hashicorp/vault 1.12.8

hashicorp/vault 1.13.4

hashicorp/vault 1.14.0

Published Jul 28, 2023

Tracked Since Feb 18, 2026