UpHeron
All vulnerabilities

Servers and applications

CVE-2023-5954

HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10.

Severity
High 7.5
Published
9 Nov 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.13.10, 1.14.6, 1.15.2
Sources
NVD

Affected software

SoftwareAffected versions
HashiCorp VaultServers and applications · cpe:a:hashicorp:vault
  • From 1.13.7 before 1.13.10
  • From 1.14.3 before 1.14.6
  • From 1.15.0 before 1.15.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-5954
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-5954