Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-68390

Опубликовано: 18 дек. 2025
Источник: debian

Описание

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
elasticsearchremovedpackage

Связанные уязвимости

CVSS3: 4.9
ubuntu
около 2 месяцев назад

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

CVSS3: 4.9
nvd
около 2 месяцев назад

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

msrc
около 2 месяцев назад

Elasticsearch Allocation of Resources Without Limits or Throttling

CVSS3: 4.9
github
около 2 месяцев назад

Elasticsearch privileged authenticated users can cause DoS through Excessive Resource Allocation