CVE-2017-11480 Denial of Service in Packetbeat
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic github.com/elastic/beats(Go) | < 5.6.4 | 5.6.4 |
| Elastic github.com/elastic/beats(Go) | >= 6.0.0-alpha1, < 6.0.0 | 6.0.0 |
| Elastic github.com/elastic/beats(Go) | < 6.1.0+incompatible | 6.1.0+incompatible |
| elasticsearch packetbeat | < 5.6.4 | 5.6.4 |
| Elastic Packetbeat | = before 5.6.4 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- discuss.elastic.co vendor-advisory
- github.com patch
- github.com patch
- github.com patch
- pkg.go.dev
- github.com
- github.com product