CVE-2015-5378

概要

参考情報

• packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.html · Third Party Advisory
• securityfocus.com/archive/1/536050/100/0/threaded
• securityfocus.com/archive/1/536859/100/0/threaded
• securityfocus.com/bid/76015 · Third Party Advisory
• elastic.co/community/security · Vendor Advisory

logstash のその他の脆弱性

• CVE-2026-33466緊急 9.8Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote cod…
• CVE-2023-46672中 5.5An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisit…
• CVE-2021-22138低 3.7In Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw was found in the monitoring feature. When sp…
• CVE-2019-7620高 7.5Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is…
• CVE-2019-7612緊急 9.8A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is s…