CVE-2024-23449
Elasticsearch Uncaught Exception
Summary
Elasticsearch Uncaught Exception
Original description
The description as published by the source.
An uncaught exception in Elasticsearch >= 8.4.0 and < 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch ingest node that attempts to parse the PDF file will crash. This does not happen with password-protected PDF files or with unencrypted PDF files.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
elasticsearch
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"8.11.1"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co