Elasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 Fragments

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-68388 · ADVISORY
• elastic/beats commit 28cfc80 · WEB
• discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177 · WEB
• elastic/beats · PACKAGE
• GitHub Advisory GHSA-fj69-23m4-ccvv · ADVISORY

github.com/elastic/beats のその他の脆弱性

• CVE-2026-26933中 5.7Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data …
• CVE-2026-26931中 5.7Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service v…
• CVE-2026-0528高 7.5Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Mani…
• CVE-2025-68383中 6.5Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Dissect processor …
• CVE-2023-49922中 6.5An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if inges…