CVE-2021-22144 affecting package rubygem-elasticsearch 7.6.0-1

CVE-2021-22144 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: Vulnerability in Elasticsearch affects IBM Cloud Private (CVE-2021-22144)

Summary There is a vulnerability in the Elasticsearch open source library. The library is used by IBM Cloud Private logging. This bulletin identifies the security fixes to apply to address the Elasticsearch vulnerability CVE-2021-22144. Vulnerability Details CVEID: CVE-2021-22144 DESCRIPTION:...

Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities - Elasticsearch ( CVE-2021-22144, CVE-2021-22145, CVE-2021-22147)

Summary IBM Security SOAR is using a component with known vulnerabilities - Elasticsearch CVE-2021-22144, CVE-2021-22145, CVE-2021-22147 Vulnerability Details CVEID: CVE-2021-22144 DESCRIPTION: Elasticsearch is vulnerable to a denial of service, caused by an uncontrolled recursion vulnerability i...

at.molindo:esi4j (>=0.3.0-alpha-1, <=0.3.0-alpha-3), com.blacklocus.jres:jres-test (>=0.1.13, <=0.1.14) +17 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.90.7)

org.elasticsearch:elasticsearch MAVEN version 0.90.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =0.3.0-alpha-1, =0.1.13, =0.1.1, =0.5.0, =0.2.0, =0.90.7.1, =0.8.1-0907,...

com.sksamuel.elastic4s:elastic4s_2.10 (>=0.90.8.0, <=0.90.8.2), com.sksamuel.elasticsearch:elasticsearch-river-neo4j (0.90.8.0) +7 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.90.8)

org.elasticsearch:elasticsearch MAVEN version 0.90.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 =0.90.8.0, =0.90.8.2 -...

org.elasticsearch:elasticsearch-analysis-icu (0.9.0), org.elasticsearch:elasticsearch-client-groovy (0.9.0) +4 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.9.0)

org.elasticsearch:elasticsearch MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.9.0 - org.elasticsearch:elasticsearch-client-groov...

com.aconex.scrutineer:scrutineer (1.0.0), org.elasticsearch:elasticsearch-analysis-icu (0.17.9) +12 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.17.9)

org.elasticsearch:elasticsearch MAVEN version 0.17.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.aconex.scrutineer:scrutineer 1.0.0 - org.elasticsearch:elasticsearch-analysis-icu 0.17.9 -...

com.automattic:elasticsearch-statsd (2.0.1.0), com.sksamuel.elastic4s:elastic4s-core-tests_2.10 (>=2.0.0, <=2.0.1) +60 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (2.0.1)

org.elasticsearch:elasticsearch MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 2.0.1.0 - com.sksamuel.elastic4s:elastic4s-core-tests2.10...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2021-22144 Source...

com.github.kzwang:elasticsearch-osem (1.0.0), com.github.kzwang:elasticsearch-transport-redis (1.0.0) +13 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.90.10)

org.elasticsearch:elasticsearch MAVEN version 0.90.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.kzwang:elasticsearch-osem 1.0.0 - com.github.kzwang:elasticsearch-transport-redis...

com.barchart.wrap:barchart-wrap-elasticsearch-all (>=0.20.3-build002, <=0.20.4-build001), com.yakaz.elasticsearch.plugins:elasticsearch-analysis-combo (1.2.1) +10 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.19.0)

org.elasticsearch:elasticsearch MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.barchart.wrap:barchart-wrap-elasticsearch-all =0.20.3-build002, =1.0.0, =1.3.0, =1.4.0,...

com.automattic:elasticsearch-statsd (>=2.4.0.0, <=2.4.0.1), com.floragunn:dlic-search-guard-auth-http-jwt (2.4-2) +102 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (2.4.0)

org.elasticsearch:elasticsearch MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd =2.4.0.0, =2.4-2, =2.4-3, =2.4-2, =2.4-3, =2.4-1, =2.4.0.6,...

at.molindo:esi4j (>=0.3.0, <=0.3.2), com.code972:elasticsearch-analysis-hebrew (1.0) +13 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.90.11)

org.elasticsearch:elasticsearch MAVEN version 0.90.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =0.3.0, =0.3.2 - com.code972:elasticsearch-analysis-hebrew 1.0 -...

com.floragunn:search-guard-5 (>=5.6.6-18, <=5.6.6-19.1), com.floragunn:search-guard-ssl (5.6.6-23) +17 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (5.6.6)

org.elasticsearch:elasticsearch MAVEN version 5.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-5 =5.6.6-18, =1.6.0, =1.6.0, =5.0.0-rc2, =9.6.0 -...

org.elasticsearch:elasticsearch-analysis-icu (0.16.0), org.elasticsearch:elasticsearch-cloud-aws (0.16.0) +13 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.16.0)

org.elasticsearch:elasticsearch MAVEN version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.0 - org.elasticsearch:elasticsearch-cloud-aws...

at.molindo:esi4j (1.0.2), com.blinkbox.books:elastic-http_2.11 (0.0.12) +42 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (1.4.2)

org.elasticsearch:elasticsearch MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j 1.0.2 - com.blinkbox.books:elastic-http2.11 0.0.12 -...

com.findwise.hydra:hydra-elasticsearch-out-stage (>=0.3.0, <=0.5.0), com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (>=1.6.3, <=1.6.4) +18 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.20.5)

org.elasticsearch:elasticsearch MAVEN version 0.20.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.findwise.hydra:hydra-elasticsearch-out-stage =0.3.0, =1.6.3, =0.0.1, =0.7.5, =1.1.0.beta1,...

com.sksamuel.elastic4s:elastic4s_2.10 (1.1.2.0), com.sksamuel.elastic4s:elastic4s_2.11 (1.1.2.0) +9 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (1.1.2)

org.elasticsearch:elasticsearch MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 1.1.2.0 - com.sksamuel.elastic4s:elastic4s2.11 1.1.2.0 -...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2021-22144 Source advisory:...

com.arcadeanalytics:arcadeanalytics (>=1.0.2, <=1.0.8), com.automattic:elasticsearch-statsd (2.4.6.0) +137 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (2.4.6)

org.elasticsearch:elasticsearch MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.arcadeanalytics:arcadeanalytics =1.0.2, =1.0.0.m2, =1.0.0.m2, =1.0.0.m2, =1.0.0.m2, =1.0.0.m2...