CVE-2021-32575

Published: Jun 17, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.

Affected (2)

Products: Hashicorp: Nomad

Hashicorp

1 product

Nomad

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Hashicorp Nomad	Up to 1.0.4
Hashicorp Nomad	Up to 1.0.4

References (4)

https://discuss.hashicorp.com/t/hcsec-2021-14-nomad-bridge-networking-mode-allows-arp-spoofing-from-other-bridged-tasks-on-same-node/24296

Source: cve@mitre.org

PatchVendor Advisory

https://www.hashicorp.com/blog/category/nomad

Source: cve@mitre.org

Product

https://discuss.hashicorp.com/t/hcsec-2021-14-nomad-bridge-networking-mode-allows-arp-spoofing-from-other-bridged-tasks-on-same-node/24296

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.hashicorp.com/blog/category/nomad

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.