CVE-2024-52979
Elasticsearch Uncontrolled Resource Consumption vulnerability
概要
Elasticsearch Uncontrolled Resource Consumption vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
elasticsearch
[{"type":"SEMVER","events":[{"introduced":"7.17.0"},{"fixed":"7.17.25"},{"introduced":"8.0.0"},{"fixed":"8.16.0"}]}]
参照URL
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co