CVE-2024-23449
Elasticsearch Uncaught Exception
概要
Elasticsearch Uncaught Exception
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An uncaught exception in Elasticsearch >= 8.4.0 and < 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch ingest node that attempts to parse the PDF file will crash. This does not happen with password-protected PDF files or with unencrypted PDF files.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
elasticsearch
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"8.11.1"}]}]
参照URL
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co