6.5
Medium
CVE-2025-68381 Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow…
Description
Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow (CAPEC-100) and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid fragment sequence number.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Packetbeat 9.2 | 9.2.0 → 9.2.2 | No fix stated |
| Packetbeat 9.0 | 9.0.0 → 9.1.8 | No fix stated |
| Packetbeat 8.0 | 8.0.0 → 8.19.8 | No fix stated |
| Packetbeat 7.0 | 7.0.0 → 7.17.29 | No fix stated |
References
- discuss.elastic.co discuss.elastic.co
Timeline
- Published
- Last modified
Other CVEs of Packetbeat
The 8 CVEs of Packetbeat →
CVE-2026-115297
NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially…
6.5
Medium
CVE-2026-26933
Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of…
5.7
Medium
CVE-2026-26932
Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of…
5.7
Medium
CVE-2026-0529
Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause…
6.5
Medium