Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qwrx-45xf-jjf7

Опубликовано: 26 окт. 2023
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Elasticsearch vulnerable to stack overflow in the search API

A flaw was discovered in Elasticsearch affecting the _search API that allowed a specially crafted query string to cause a stack overflow and ultimately a denial of service.

Пакеты

Наименование

org.elasticsearch:elasticsearch

maven
Затронутые версииВерсия исправления

>= 7.0.0, < 7.17.13

7.17.13

Наименование

org.elasticsearch:elasticsearch

maven
Затронутые версииВерсия исправления

>= 8.0.0, < 8.9.1

8.9.1

EPSS

Процентиль: 99%
0.60679
Средний

6.5 Medium

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 3 года назад

A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.

CVSS3: 7.5
redhat
почти 3 года назад

A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.

CVSS3: 6.5
nvd
почти 3 года назад

A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.

msrc
9 дней назад

Elasticsearch StackOverflow vulnerability

CVSS3: 6.5
debian
почти 3 года назад

A flaw was discovered in Elasticsearch, affecting the _search API that ...

EPSS

Процентиль: 99%
0.60679
Средний

6.5 Medium

CVSS3

Дефекты

CWE-121
CWE-787