CVE-2023-3774

MEDIUM

Hashicorp Vault - Improper Exception Handling

Title source: rule

Description

An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.

References (1)

[Vendor Advisory] https://discuss.hashicorp.com/t/hcsec-2023-23-vault-enterprise-namespace-creation-may-lead-to-denial-of-service/56617

Scores

CVSS v3 4.9

EPSS 0.0053

EPSS Percentile 67.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-755 CWE-248

Status published

Affected Products (3)

hashicorp/vault

Timeline

Published Jul 28, 2023

Tracked Since Feb 18, 2026