{"id":"CVE-2023-3774","aliases":["BIT-vault-2023-3774","EUVD-2023-44407","GHSA-7j85-mwfj-2gr8"],"status":"published","title":"Vault Enterprise Namespace Creation May Lead to Denial of Service","description":"An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00693,"percentile":0.53253,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-248","CWE-703","CWE-755"],"published":"2023-07-28T00:45:04Z","modified":"2026-10-28T02:30:41Z","fixes":[{"ecosystem":"Bitnami","package":"vault","fixed_in":["1.12.9","1.13.5","1.14.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"vault","ranges":[{"type":"SEMVER","events":[{"introduced":"1.12.8"},{"fixed":"1.12.9"},{"introduced":"1.13.4"},{"fixed":"1.13.5"},{"introduced":"1.14.0"},{"fixed":"1.14.1"}]}]}],"products":[{"vendor":"hashicorp","product":"vault"},{"vendor":"hashicorp","product":"vault enterprise"}],"references":[{"url":"https://discuss.hashicorp.com/t/hcsec-2023-23-vault-enterprise-namespace-creation-may-lead-to-denial-of-service/56617","tags":["x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3774","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-7j85-mwfj-2gr8"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3774.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-3774","title":"Vault Enterprise Namespace Creation May Lead to Denial of Service","description":"An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.","status":"published","published":"2023-07-28T00:45:04.379Z","modified":"2024-10-22T18:22:38.101Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-248"],"updated_at":"2026-11-02T14:35:24.360381Z"}],"euvd":[{"id":"EUVD-2023-44407","description":"An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.","status":"published","published":"2023-07-28T00:45:04Z","modified":"2024-10-22T18:22:38Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:05:22.224445Z"}],"ghsa":[{"id":"GHSA-7j85-mwfj-2gr8","title":"An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash,...","description":"An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.","status":"published","published":"2023-07-28T03:30:12Z","modified":"2023-11-05T05:01:06Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-703","CWE-755"],"updated_at":"2026-11-02T14:54:51.069435Z"}],"nvd":[{"id":"CVE-2023-3774","description":"An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.","status":"published","published":"2023-07-28T01:15:09.82Z","modified":"2026-06-17T06:14:49.79Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-248","CWE-755"],"updated_at":"2026-11-02T14:08:18.687088Z"}],"osv":[{"id":"CVE-2023-3774","title":"Vault Enterprise Namespace Creation May Lead to Denial of Service","description":"An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.","status":"published","published":"2023-07-28T00:45:04.379Z","modified":"2026-10-28T02:30:41.995920772Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-248"],"updated_at":"2026-11-02T15:44:32.922049Z"},{"id":"BIT-vault-2023-3774","title":"Vault Enterprise Namespace Creation May Lead to Denial of Service","description":"An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.","status":"published","published":"2024-03-06T11:08:50.391Z","modified":"2026-09-08T08:48:21.647628655Z","updated_at":"2026-11-02T15:28:36.104787Z"}]}}