A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.
References
| Link | Resource |
|---|---|
| https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314 | Vendor Advisory |
| https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314 | Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20240517-0010/ | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20240517-0010/ | Third Party Advisory |
| https://www.elastic.co/community/security | Vendor Advisory |
| https://www.elastic.co/community/security | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
04 Feb 2025, 14:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Elastic elasticsearch
Elastic |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://www.elastic.co/community/security - Vendor Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20240517-0010/ - Third Party Advisory | |
| References | () https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:* |
10 Jun 2024, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
27 Mar 2024, 17:48
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-27 17:15
Updated : 2025-02-04 14:23
NVD link : CVE-2024-23450
Mitre link : CVE-2024-23450
JSON object : View
Products Affected
elastic
- elasticsearch
CWE