| Package | Affected versions | Patched versions |
|---|---|---|
| splunk | ≥ 8.1.0, < 8.1.14≥ 8.2.0, < 8.2.11≥ 9.0.0, < 9.0.5 | 8.1.148.2.119.0.5 |
| splunk cloud platform | < 9.0.2303.100 | 9.0.2303.100 |
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the {{dump}} SPL command to cause a denial of service by crashing the Splunk daemon.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free