PT-2017-7879

Name of the Vulnerable Software and Affected Versions Logstash versions prior to 2.3.3 Description A denial of service attack can be performed by a remote attacker on the Logstash instance when using the Netflow Codec plugin. This is achieved by crafting malicious Netflow v5, Netflow v9, or IPFIX...

CVE-2016-10363: Uncaught Exception

Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance. The errors resulting from these crafted inputs are not handled by the codec and ca...