CVE-2024-43709
Elasticsearch allocation of resources without limits or throttling leads to crash
Résumé
Elasticsearch allocation of resources without limits or throttling leads to crash
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
elasticsearch
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.21"},{"introduced":"8.0.0"},{"fixed":"8.13.3"}]}]
Références
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co