Описание
Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a specially crafted request to an upload endpoint that causes excessive memory consumption, which may render Fleet Server unavailable.
Уязвимые конфигурации
Конфигурация 1Версия от 8.0.0 (включая) до 8.19.11 (исключая)Версия от 9.0.0 (включая) до 9.2.5 (исключая)
Одно из
cpe:2.3:a:elastic:fleet_server:*:*:*:*:*:*:*:*
cpe:2.3:a:elastic:fleet_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00476
Низкий
6.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 6.5
github
2 месяца назад
Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a specially crafted request to an upload endpoint that causes excessive memory consumption, which may render Fleet Server unavailable.
EPSS
Процентиль: 39%
0.00476
Низкий
6.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-770