{"id":"CVE-2023-5954","aliases":["GHSA-4qhc-v8r6-8vwm","BIT-vault-2023-5954","GO-2023-2329"],"title":"HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability","summary":"HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"hashicorp","product":"github.com/hashicorp/vault","ecosystem":"go","affected":["github.com/hashicorp/vault < 1.13.10","github.com/hashicorp/vault >= 1.14.0, < 1.14.6","github.com/hashicorp/vault >= 1.15.0, < 1.15.2"],"patched":["github.com/hashicorp/vault 1.13.10","github.com/hashicorp/vault 1.14.6","github.com/hashicorp/vault 1.15.2"],"published":"2023-11-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:04.037645183Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-4qhc-v8r6-8vwm","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5954"},{"url":"https://discuss.hashicorp.com/t/hcsec-2023-33-vault-requests-triggering-policy-checks-may-lead-to-unbounded-memory-consumption/59926"},{"url":"https://github.com/hashicorp/vault"},{"url":"https://security.netapp.com/advisory/ntap-20231227-0001"}],"tags":["osv","go"],"epss":0.00719,"epssPercentile":0.52439,"ingestedAt":"2026-09-12T03:13:01.753Z","slug":"CVE-2023-5954","body":"## Overview\n\nHashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10.\n\n## Affected packages\n\n- `github.com/hashicorp/vault < 1.13.10`\n- `github.com/hashicorp/vault >= 1.14.0, < 1.14.6`\n- `github.com/hashicorp/vault >= 1.15.0, < 1.15.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `github.com/hashicorp/vault 1.13.10`\n- `github.com/hashicorp/vault 1.14.6`\n- `github.com/hashicorp/vault 1.15.2`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}