CVE-2023-3774

MEDIUM

Vault Enterprise - Denial of Service via Namespace Creation

Title source: llm
STIX 2.1

Description

An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.

References (1)

Core 1

Scores

CVSS v3 4.9
EPSS 0.0057
EPSS Percentile 42.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-755 CWE-248
Status published
Products (3)
hashicorp/vault 1.12.8
hashicorp/vault 1.13.4
hashicorp/vault 1.14.0
Published Jul 28, 2023
Tracked Since Feb 18, 2026