6.5
Medium
CVE-2025-68382 Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via…
Description
Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a denial-of-service (DoS) through a reliable process crash when handling truncated XDR-encoded RPC messages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Packetbeat 9.2 | 9.2.0 → 9.2.2 | No fix stated |
| Packetbeat 9.0 | 9.0.0 → 9.1.8 | No fix stated |
| Packetbeat 8.0 | 8.0.0 → 8.19.8 | No fix stated |
| Packetbeat 7.0 | 7.0.0 → 7.17.29 | No fix stated |
References
- discuss.elastic.co discuss.elastic.co
Timeline
- Published
- Last modified
Other CVEs of Packetbeat
The 8 CVEs of Packetbeat →
CVE-2026-115297
NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially…
6.5
Medium
CVE-2026-26933
Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of…
5.7
Medium
CVE-2026-26932
Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of…
5.7
Medium
CVE-2026-0529
Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause…
6.5
Medium