Non notée
CVE-2016-10363 Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow…
Description
Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance. The errors resulting from these crafted inputs are not handled by the codec and can cause the Logstash process to exit.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Logstash | Versions non publiées |
Références
- www.elastic.co www.elastic.co
Chronologie
- Publiée
- Dernière modification
Autres CVE de Logstash
Les 9 CVE de Logstash →
CVE-2026-33466
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and…
8.1
Élevée
CVE-2025-37730
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client”…
6.5
Moyenne
CVE-2023-46672
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific…
8.4
Élevée
CVE-2019-7620
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin
Non notée