CVE-2026-0530
Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation
Résumé
Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.19.10"},{"introduced":"9.0.0"},{"fixed":"9.1.10"},{"introduced":"9.2.0"},{"fixed":"9.2.4"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.19.10"},{"introduced":"9.0.0"},{"fixed":"9.1.10"},{"introduced":"9.2.0"},{"fixed":"9.2.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co