CVE-2023-3774

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-248 CWE-755

Affected software

No affected versions have been published.

Timeline

Published: Jul 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-377426.1WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.CVE-2023-377436.1A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HT CVE-2023-377446.1Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-book CVE-2023-377456.1A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML v CVE-2023-377466.1A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML v CVE-2023-377485.5ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c.CVE-2023-377495.3Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper au CVE-2023-37754.9A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to CVE-2023-377549.8PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.CVE-2023-377559.8i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning CVE-2023-377569.8I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are abl CVE-2023-377587.5D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi.