Elasticsearch Logstash allows remote attackers to execute arbitrary commands

ÉLEVÉE 7.5CVE-2014-4326 · GHSA-8qhq-rq4j-8prj · Published 22/07/2014 · updated 17/06/2026

En bref

CVE-2014-4326 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant logstash, logstash (elastic).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.3%, plus élevée que 88.5% des vulnérabilités.
Correctif : mettre à jour vers 1.4.2 ou plus récent.

Package	Affected versions	Patched versions
logstash RubyGems	`≥ 1.0.14, < 1.4.2`	`1.4.2`
logstash elastic	`= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.1.0= 1.1.0.1= 1.1.1= 1.1.10= 1.1.11= 1.1.12= 1.1.13= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 1.2.1= 1.2.2= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.4.0= 1.4.1`	No fix yet

Description

Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.

NVD description

Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.

References

nvd.nist.gov/vuln/detail/CVE-2014-4326 · ADVISORY
elastic/logstash · PACKAGE
web.archive.org/web/20140804031140/http://www.elasticsearch.org/blog/logstash-1-4-2 · WEB
web.archive.org/web/20201207013408/http://www.securityfocus.com/archive/1/532841/100/0/threaded · WEB
elastic.co/community/security · WEB
elasticsearch.org/blog/logstash-1-4-2
securityfocus.com/archive/1/532841/100/0/threaded
elastic.co/community/security · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free