Aller au contenu
en Se connecter
7.5 Élevée

CVE-2026-7776 Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service…

Description

Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes. An attacker with network access to the worker authentication listener may open a connection and delay or withhold the client certificate during the TLS handshake, causing worker connection handling to block. This may prevent legitimate worker connections from being accepted or routed. This vulnerability, CVE-2026-7776, is fixed in Boundary 0.21.3, 0.20.3, 0.19.5.

Produits et versions touchés

Produit Versions touchées Corrigé en
Boundary 0.9 0.9.0 → < 0.21.3 0.21.3
Boundary Enterprise 0.9 0.9.0 → < 0.21.3 0.21.3

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Boundary

Les 5 CVE de Boundary →
CVE-2026-13303 HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store… 8.7 Élevée CVE-2024-12289 Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the… 5.9 Moyenne CVE-2024-1052 Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering 8.0 Élevée CVE-2023-0690 HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management… 5.0 Moyenne
Suivre cette CVE