Lucene search
PRIOn knowledge basePRION:CVE-2023-31418HistoryOct 26, 2023 - 6:15 p.m.
Code injection
2023-10-2618:15:00
PRIOn knowledge base
www.prio-n.com
10
elasticsearch
http
code injection
vulnerability
unauthenticated users
outofmemory
exploitation
An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering and we have no indication that the issue is known or that it is being exploited in the wild.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elastic_cloud_enterprise | le | 2.13.3 | |
| elastic_cloud_enterprise | eq | 3.6.0 | |
| elasticsearch | le | 7.17.12 | |
| elasticsearch | ge | 8.0.0 | |
| elasticsearch | le | 8.8.2 |
Related
veracode
veracode
Denial Of Service (DoS)
2023-10-27 07:27:04
osv
osv
CVE-2023-31418
2023-10-26 18:15:08
BIT-elasticsearch-2023-31418
2024-03-06 10:51:58
OpenSearch uncontrolled resource consumption
2023-10-17 14:24:48
ibm
ibm
ubuntucve
ubuntucve
CVE-2023-31418
2023-10-26 00:00:00
github
github
OpenSearch uncontrolled resource consumption
2023-10-17 14:24:48
Elasticsearch vulnerable to Uncontrolled Resource Consumption
2023-10-26 18:30:23
redhatcve
redhatcve
CVE-2023-31418
2023-10-30 11:27:32
cvelist
cvelist
CVE-2023-31418 Elasticsearch uncontrolled resource consumption
2023-10-26 17:36:42
cve
cve
CVE-2023-31418
2023-10-26 18:15:08
nvd
nvd
CVE-2023-31418
2023-10-26 18:15:08