CVE-2024-8185

Vault Community and Vault Enterprise (“Vault”) clusters using Vault’s Integrated Storage backend are vulnerable to a denial-of-service (DoS) attack through memory exhaustion through a Raft cluster join API endpoint . An attacker may send a large volume of requests to the endpoint which may cause Vault to consume excessive system memory resources, potentially leading to a crash of the underlying system and the Vault process itself. This vulnerability, CVE-2024-8185, is fixed in Vault Community 1.18.1 and Vault Enterprise 1.18.1, 1.17.8, and 1.16.12.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://discuss.hashicorp.com/t/hcsec-2024-26-vault-vulnerable-to-denial-of-service-through-memory-exhaustion-when-processing-raft-cluster-join-requests/71047	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hashicorp:vault:::::enterprise:::*
	cpe:2.3:a:hashicorp:vault:::::-:::*
	cpe:2.3:a:hashicorp:vault:::::enterprise:::*
	cpe:2.3:a:hashicorp:vault:1.18.0::::enterprise:::

Configuration 2 (hide)

cpe:2.3:a:openbao:openbao:*:*:*:*:*:*:*:*

History

13 Nov 2025, 17:40

Type	Values Removed	Values Added
CPE		cpe:2.3:a:openbao:openbao::::::::
First Time		Openbao openbao Openbao

Information

Published : 2024-10-31 16:15

Updated : 2025-11-13 17:40

NVD link : CVE-2024-8185

Mitre link : CVE-2024-8185

CVE.ORG link : CVE-2024-8185

JSON object : View

Products Affected

openbao

openbao

hashicorp

vault

CWE

CWE-636

Not Failing Securely ('Failing Open')

{"id": "CVE-2024-8185", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-10-31T16:15:06.267", "references": [{"url": "https://discuss.hashicorp.com/t/hcsec-2024-26-vault-vulnerable-to-denial-of-service-through-memory-exhaustion-when-processing-raft-cluster-join-requests/71047", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-636"}]}], "descriptions": [{"lang": "en", "value": "Vault Community and Vault Enterprise (\u201cVault\u201d) clusters using Vault\u2019s Integrated Storage backend are vulnerable to a denial-of-service (DoS) attack through memory exhaustion through a Raft cluster join API endpoint . An attacker may send a large volume of requests to the endpoint which may cause Vault to consume excessive system memory resources, potentially leading to a crash of the underlying system and the Vault process itself.\n\nThis vulnerability, CVE-2024-8185, is fixed in Vault Community 1.18.1 and Vault Enterprise 1.18.1, 1.17.8, and 1.16.12."}, {"lang": "es", "value": "Los cl\u00fasteres Vault Community y Vault Enterprise (\u201cVault\u201d) que utilizan el backend de almacenamiento integrado de Vault son vulnerables a un ataque de denegaci\u00f3n de servicio (DoS) a trav\u00e9s del agotamiento de la memoria mediante un endpoint de la API de uni\u00f3n al cl\u00faster de Raft. Un atacante puede enviar un gran volumen de solicitudes al endpoint, lo que puede provocar que Vault consuma recursos excesivos de memoria del sistema, lo que puede provocar un bloqueo del sistema subyacente y del propio proceso de Vault. Esta vulnerabilidad, CVE-2024-8185, se corrigi\u00f3 en Vault Community 1.18.1 y Vault Enterprise 1.18.1, 1.17.8 y 1.16.12."}], "lastModified": "2025-11-13T17:40:36.950", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "DB67F465-3F0B-4CC8-B789-B8409A53E744", "versionEndExcluding": "1.16.12", "versionStartIncluding": "1.2.0"}, {"criteria": "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "8B42214F-20DE-4A4F-BFD6-D37DD7E54216", "versionEndExcluding": "1.18.1", "versionStartIncluding": "1.2.0"}, {"criteria": "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "AB513412-962A-47C5-A4CE-65E07CB427E1", "versionEndExcluding": "1.17.8", "versionStartIncluding": "1.17.0"}, {"criteria": "cpe:2.3:a:hashicorp:vault:1.18.0:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "0F3539C1-C27D-4ED1-8658-56BBE565EFCE"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openbao:openbao:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AF7F4E0-53DA-4F85-B896-468E73211B54", "versionEndExcluding": "2.0.3"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}