CVE-2026-0530
Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation
概要
Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs.
影響パッケージ
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.19.10"},{"introduced":"9.0.0"},{"fixed":"9.1.10"},{"introduced":"9.2.0"},{"fixed":"9.2.4"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.19.10"},{"introduced":"9.0.0"},{"fixed":"9.1.10"},{"introduced":"9.2.0"},{"fixed":"9.2.4"}]}]
参照URL
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co