CVE-2024-43709
Elasticsearch allocation of resources without limits or throttling leads to crash
Summary
Elasticsearch allocation of resources without limits or throttling leads to crash
Original description
The description as published by the source.
An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
elasticsearch
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.21"},{"introduced":"8.0.0"},{"fixed":"8.13.3"}]}]
References
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co