CVE-2024-52979
CVE-2024-52979 · Elasticsearch Uncontrolled Resource Consumption vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash.
CVSS 6.5 · Medium · EPSS 0.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
elasticsearch
- Versions
- ≥ 7.17.0, < 7.17.25: Affected (semver)
- ≥ 8.0.0, < 8.16.0: Affected (semver)
Update to 7.17.25; Update to 8.16.0
elasticsearch Ubuntu:16.04:LTS
- Versions
- 1.6.2+dfsg-1
- 1.7.3+dfsg-1
- 1.7.3+dfsg-2
- 1.7.3+dfsg-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published