Not rated
CVE-2016-10363 Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow…
Description
Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance. The errors resulting from these crafted inputs are not handled by the codec and can cause the Logstash process to exit.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Logstash | Versions not published |
References
- www.elastic.co www.elastic.co
Timeline
- Published
- Last modified
Other CVEs of Logstash
The 9 CVEs of Logstash →
CVE-2026-33466
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and…
8.1
High
CVE-2025-37730
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client”…
6.5
Medium
CVE-2023-46672
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific…
8.4
High
CVE-2019-7620
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin
Not rated