Описание
A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 7.0.0 (включая) до 7.17.12 (включая)Версия от 8.0.0 (включая) до 8.9.0 (включая)
Одно из
cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*
cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.60679
Средний
6.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-121
CWE-787
Связанные уязвимости
CVSS3: 6.5
ubuntu
почти 3 года назад
A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.
CVSS3: 7.5
redhat
почти 3 года назад
A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.
CVSS3: 6.5
debian
почти 3 года назад
A flaw was discovered in Elasticsearch, affecting the _search API that ...
CVSS3: 6.5
github
почти 3 года назад
Elasticsearch vulnerable to stack overflow in the search API
EPSS
Процентиль: 99%
0.60679
Средний
6.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-121
CWE-787