CVE-2015-5378

Elastic Logstash versions prior to 1.5.3 (1.5.x) and prior to 1.4.4 (1.4.x) are vulnerable to a SSL/TLS FREAK-based man-in-the-middle bypass when using the Lumberjack input in combination with Logstash Forwarder. This allows an attacker to intercept and potentially read the communications between...

CVE-2015-5619

CVE-2015-5619 affects Logstash 1.4.x (<1.4.5) and 1.5.x (

CVE-2017-14730

The vulnerability CVE-2017-14730 affects the Gentoo package Gentoo app-admin/logstash-bin (versions before 5.5.3 and 5.6.x before 5.6.1). The root cause is in the init script, which performs recursive chown -R on user-writable directory trees. This enables a local attacker to exploit access to a ...