442 matches found
Malicious code in logstash-codec-bulk-es (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in logstash-codec-avro-schema_registry (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6980 Malicious code in logstash-codec-avro-schema_registry (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ant31_logstash-filter-kubernetes (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6612 Malicious code in ant31_logstash-filter-kubernetes (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
GHSA-R95H-9X8F-R3F7 vulnerabilities
Vulnerabilities for packages: logstash-jre-bcfips, logstash...
GHSA-R95H-9X8F-R3F7 vulnerabilities
Vulnerabilities for packages: logstash...
Security Bulletin: A Bouncy Castle vulnerability has been identified in Apache Solr and Logstash shipped with IBM Operations Analytics - Log Analysis (CVE-2023-33201)
Summary There is a potential injection vulnerability in Bouncy Castle that is used by Apache Solr and Logstash. This has been addressed Vulnerability Details CVEID:CVE-2023-33201 DESCRIPTION: The Bouncy Castle Crypto Package For Java bc-java could allow a remote attacker to obtain sensitive...
Security Bulletin: Multiple vulnerabilities affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis
Summary The following security issues have been identified in Netty component included as part of Apache Solr, Apache Zookeeper and Logstash product Vulnerability Details CVEID:CVE-2023-34462 DESCRIPTION: Netty is vulnerable to a denial of service, caused by a flaw with allocating up to 16MB of...
Security Bulletin: Multiple vulnerabilities in Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis (CVE-2023-43642, CVE-2023-34454, CVE-2023-34453, CVE-2023-34455)
Summary snappy-java in Apache Solr, Apache Zookeeper and Logstash is vulnerable to a denial of service. This has been addressed Vulnerability Details CVEID:CVE-2023-34454 DESCRIPTION: snappy-java is vulnerable to a denial of service, caused by an integer overflow in the compress function. By...
Security Bulletin: Vulnerability in Apache Solr, Apache Zookeeper and Logstash affect IBM Operations Analytics - Log Analysis (CVE-2023-34462)
Summary There is Netty vulnerability in Apache Solr, Apache Zookeeper and Logstash that effect IBM Operations Analytics - Log Analysis. These have been addressed Vulnerability Details CVEID:CVE-2023-34462 DESCRIPTION: Netty is vulnerable to a denial of service, caused by a flaw with allocating up...
Security Bulletin: Google Guava vulnerability in Apache Solr and Logstash bundled with IBM Operations Analytics - Log Analysis (CVE-2023-2976)
Summary There is an information disclosure vulnerability in Google Guava that is used by Apache Solr and Logstash. This has been addressed Vulnerability Details CVEID:CVE-2023-2976 DESCRIPTION: Google Guava could allow a local authenticated attacker to obtain sensitive information, caused by a fl...
BIT-LOGSTASH-2021-22138
In Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw was found in the monitoring feature. When specifying a trusted server CA certificate Logstash would not properly verify the certificate returned by the monitoring server. This could result in a man in...
BIT-LOGSTASH-2023-46672 Logstash Insertion of Sensitive Information into Log File
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: Logstash is configured to log in JSON format...
CVE-2024-25126 vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, kube-fluentd-operator...
CVE-2024-26146 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rack...
CVE-2024-25126 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rack...
CVE-2024-26146 vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, kube-fluentd-operator...