| Package | Affected versions | Patched versions |
|---|---|---|
| elasticsearch | ≥ 8.0.0, < 8.19.18≥ 9.0.0, < 9.3.7≥ 9.4.0, < 9.4.4 | 8.19.189.3.79.4.4 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive memory consumption, causing the Elasticsearch node to crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free