Lucene search
HistoryOct 26, 2023 - 6:15 p.m.
CVE-2023-31419
elasticsearch
flaw
_search api
stack overflow
denial of service
cve-2023-31419
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.1%
A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.
Affected configurations
Node
elasticelasticsearchRange7.0.0–7.17.12
ORelasticelasticsearchRange8.0.0–8.9.0
Related
ubuntucve
ubuntucve
CVE-2023-31419
2023-10-26 00:00:00
redhatcve
redhatcve
CVE-2023-31419
2023-10-30 11:27:32
veracode
veracode
Denial Of Service (DoS)
2023-10-30 11:49:40
github
github
Elasticsearch vulnerable to stack overflow in the search API
2023-10-26 18:30:23
OpenSearch StackOverflow vulnerability
2023-12-01 19:23:32
prion
prion
Stack overflow
2023-10-26 18:15:00
exploitdb
exploitdb
Elasticsearch - StackOverflow DoS
2024-02-09 00:00:00
zdt
zdt
Elasticsearch 8.5.3 Stack Overflow Exploit
2023-09-26 00:00:00
Elasticsearch - StackOverflow DoS Exploit
2024-02-11 00:00:00
osv
osv
CVE-2023-31419
2023-10-26 18:15:08
BIT-elasticsearch-2023-31419
2024-03-06 10:51:47
OpenSearch StackOverflow vulnerability
2023-12-01 19:23:32
cvelist
cvelist
CVE-2023-31419 Elasticsearch StackOverflow vulnerability
2023-10-26 17:06:14
ibm
ibm
cve
cve
CVE-2023-31419
2023-10-26 18:15:08
packetstorm
packetstorm
Elasticsearch 8.5.3 Stack Overflow
2023-09-22 00:00:00
githubexploit
githubexploit
Exploit for Stack-based Buffer Overflow in Elastic Elasticsearch
2023-09-22 02:15:54
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.1%
Related for NVD:CVE-2023-31419