GHSA-fj69-23m4-ccvv
Elasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 Fragments
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2025-68388
- Alias
- GO-2025-4253
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to denial-of-service in Packetbeat.
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/elastic/beats | introduced 8.6.0, fixed 8.19.9 |
| Go · github.com/elastic/beats | introduced 9.0.0, fixed 9.1.9 |
| Go · github.com/elastic/beats | introduced 9.2.0, fixed 9.2.3 |
| Go · github.com/elastic/beats/v7 | introduced 0, fixed 7.0.0-alpha2.0.20251209162832-28cfc80d2f4e |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2025-68388 ADVISORY
- https://github.com/elastic/beats/commit/28cfc80d2f4e80bfd1c72eb3f849d777751ab870 WEB
- https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177 WEB
- https://github.com/elastic/beats PACKAGE
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |