BIT-ELASTICSEARCH-2024-23450 Elasticsearch Uncontrolled Resource Consumption vulnerability

🗓️ 14 May 2024 07:17:11Reported by GoogleType

osv🔗 osv.dev👁 39 Views

Flaw in Elasticsearch causing node crash in deeply nested pipelin

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in elasticsearch-7.17.13.jar	16 Apr 202617:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	10 Jul 202407:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Elastic Elasticsearch denial of service [ CVE-2024-23450]	6 Aug 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Elasticsearch affect watsonx.data	16 Sep 202417:08	–	ibm
IBM Security Bulletins	Security Bulletin: vulerability in IBM Spectrum Symphony with Elasticsearch	23 Oct 202520:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2023-46589)	21 Jun 202411:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Elastic Elasticsearch denial of service vulnerabilitiy.( CVE-2024-23450)	28 Jan 202522:08	–	ibm
BDU FSTEC	The vulnerability of the Elasticsearch search engine, related to uncontrolled resource consumption, allows a hacker to cause a service failure.	6 Apr 202400:00	–	bdu_fstec
Chainguard	CVE-2024-23450 vulnerabilities	27 Mar 202417:15	–	cgr
Circl	CVE-2024-23450	6 Feb 202502:40	–	circl

Source	Link
discuss	www.discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314
elastic	www.elastic.co/community/security
security	www.security.netapp.com/advisory/ntap-20240517-0010/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-23450

20 May 2025 10:02Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.14.9 - 7.5

EPSS0.00951

SSVC

elasticsearch node crash ingest pipeline