CVE-2024-43709
Elasticsearch allocation of resources without limits or throttling leads to crash
概要
Elasticsearch allocation of resources without limits or throttling leads to crash
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
elasticsearch
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.21"},{"introduced":"8.0.0"},{"fixed":"8.13.3"}]}]
参照URL
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co