CVE-2024-43709
CVE-2024-43709 · Elasticsearch allocation of resources without limits or throttling leads to crash
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.
CVSS 6.5 · Medium · EPSS 0.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
elasticsearch
- Versions
- ≥ 7.17.0, 8.0.0, < 7.17.21, 8.13.3: Affected (semver)
Update to 7.17.21, 8.13.3
elasticsearch Ubuntu:16.04:LTS
- Versions
- 1.6.2+dfsg-1
- 1.7.3+dfsg-1
- 1.7.3+dfsg-2
- 1.7.3+dfsg-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published