| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/elastic/beats | ≤ 7.6.2all versions | |
| github.com/elastic/beats/v7 | ≥ 7.7.0, < 8.19.9≥ 7.7.0≥ 9.0.0, < 9.1.9≥ 9.2.0, < 9.2.3< 7.0.0-alpha2.0.20251204214633-dd3af18220bf | 8.19.99.1.99.2.37.0.0-alpha2.0.20251204214633-dd3af18220bf |
| filebeat | ≥ 7.0.0, ≤ 7.17.29≥ 8.0.0, < 8.19.9≥ 9.0.0, < 9.1.9≥ 9.2.0, < 9.2.3 | 8.19.99.1.99.2.3 |
Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Dissect processor can allow a user to trigger a Buffer Overflow (CAPEC-100) and cause a denial of service (panic/crash) of the Filebeat process via either a malformed Syslog message or a malicious tokenizer pattern in the Dissect configuration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free