Skip to content
fr Sign in
6.5 Medium

CVE-2026-115297 NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially…

Description

NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the Packetbeat process. A single crafted packet is sufficient. No AMQP authentication is necessary. While Packetbeat is not running, it does not collect network telemetry.

Affected products and versions

Product Affected versions Fixed in
Packetbeat 9.5 9.5.0 → 9.5.5 No fix stated
Packetbeat 9.0 9.0.0 → 9.4.8 No fix stated
Packetbeat 8.0 8.0.0 → 8.19.23 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Packetbeat

The 8 CVEs of Packetbeat →
CVE-2026-26933 Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of… 5.7 Medium CVE-2026-26932 Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of… 5.7 Medium CVE-2026-0529 Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause… 6.5 Medium CVE-2025-68382 Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via… 6.5 Medium
Track this CVE