Affected by GO-2022-0560 and 16 other vulnerabilities

GO-2022-0560: Nomad Spread Job Stanza May Trigger Panic in Servers in github.com/hashicorp/nomad

GO-2022-0573: Improper Authentication in HashiCorp Nomad in github.com/hashicorp/nomad

GO-2022-0584: Arbitrary file reads in HashiCorp Nomad in github.com/hashicorp/nomad

GO-2022-0591: Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad

GO-2022-0600: HashiCorp Nomad Artifact Download Race Condition in github.com/hashicorp/nomad

GO-2022-0622: Improper Privilege Management in HashiCorp Nomad in github.com/hashicorp/nomad

GO-2022-0709: Improper network isolation in Hashicorp Nomad in github.com/hashicorp/nomad

GO-2022-0732: Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad

GO-2022-0770: Path Traversal in HashiCorp Nomad in github.com/hashicorp/nomad

GO-2022-0806: Use After Free in HashiCorp Nomad in github.com/hashicorp/nomad

GO-2022-0821: Improper Certificate Validation in HashiCorp Nomad in github.com/hashicorp/nomad

GO-2022-0840: Allocation of Resources Without Limits or Throttling in HashiCorp Nomad in github.com/hashicorp/nomad

GO-2022-1062: Nomad Panics On Job Submission With Bad Artifact Stanza Source URL in github.com/hashicorp/nomad

GO-2024-2670: ACL security vulnerability in github.com/hashicorp/nomad

GO-2024-3073: Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad

GO-2024-3262: Hashicorp Nomad Incorrect Authorization vulnerability in github.com/hashicorp/nomad

GO-2024-3354: Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

nsutil

package

v0.10.0-connect1 Latest Latest Go to latest Published: Jul 9, 2019 License: MPL-2.0 Imports: 10 Imported by: 14

Details

View Source

const (
	EnvCNIPath = "CNI_PATH"
)

View Source

const NetNSRunDir = "/var/run/netns"

NetNSRunDir is the directory which new network namespaces will be bind mounted

This section is empty.

func NewNS(nsName string) (ns.NetNS, error)

NewNS creates a new persistent (bind-mounted) network namespace and returns an object representing that namespace, without switching to it.

func SetupBridgeNetworking(allocID string, nsPath string, portMappings []*PortMapping) error

func TeardownBridgeNetworking(allocID, nsPath string, portMappings []*PortMapping) error

func UnmountNS(nsPath string) error

UnmountNS unmounts the NS held by the netns object

type PortMapping struct {
	Host      int    `json:"hostPort"`
	Container int    `json:"containerPort"`
	Proto     string `json:"protocol"`
}