5.3
Medium
CVE-2025-68388 Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause…
Description
Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Packetbeat 9.2 | 9.2.0 → 9.2.2 | No fix stated |
| Packetbeat 9.0 | 9.0.0 → 9.1.8 | No fix stated |
| Packetbeat 8.6 | 8.6.0 → 8.19.8 | No fix stated |
Other CVEs of Packetbeat
The 8 CVEs of Packetbeat →
CVE-2026-115297
NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially…
6.5
Medium
CVE-2026-26933
Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of…
5.7
Medium
CVE-2026-26932
Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of…
5.7
Medium
CVE-2026-0529
Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause…
6.5
Medium