OpenSearch StackOverflow vulnerability

🗓️ 01 Dec 2023 19:23:32Reported by GitHub Advisory DatabaseType

OpenSearch StackOverflow vulnerability affecting `_search` API, allowing crafted query to cause Stack Overflow and Denial of Service. Mitigation in versions 1.3.14 and 2.11.

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for October 2023	26 Mar 202504:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Elasticsearch affect watsonx.data	3 Sep 202421:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Elasticsearch affect watsonx.data	16 Sep 202417:08	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.13 addresses multiple security vulnerabilities.	31 Jul 202411:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable multiple Elasticsearch vulnerabilities.	5 Feb 202420:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to a denial of service CVE-2023-31419	11 Mar 202414:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in elasticsearch-7.10.2.jar	5 Sep 202421:54	–	ibm
0day.today	Elasticsearch 8.5.3 Stack Overflow Exploit	26 Sep 202300:00	–	zdt
0day.today	Elasticsearch - StackOverflow DoS Exploit	11 Feb 202400:00	–	zdt
Circl	CVE-2023-31419	20 Sep 202322:42	–	circl