CVE-2017-11480

2017-12-0818:00:00

CWE-404

elastic

www.cve.org

EPSS

0.001

Percentile

46.7%

JSON

Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.

CNA Affected

[
  {
    "product": "Packetbeat",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "before 5.6.4"
      }
    ]
  }
]

References

discuss.elastic.co/t/beats-5-6-4-security-update/106739

EPSS

0.001

Percentile

46.7%

JSON

Related for CVELIST:CVE-2017-11480