6.5
Moyenne
CVE-2026-0529 Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause…
Description
Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Packetbeat 9.2 | 9.2.0 → 9.2.3 | Pas de correctif indiqué |
| Packetbeat 9.0 | 9.0.0 → 9.1.9 | Pas de correctif indiqué |
| Packetbeat 8.0 | 8.0.0 → 8.19.9 | Pas de correctif indiqué |
| Packetbeat 7.0 | 7.0.0 → 7.17.29 | Pas de correctif indiqué |
Références
- discuss.elastic.co discuss.elastic.co
Chronologie
- Publiée
- Dernière modification
Autres CVE de Packetbeat
Les 8 CVE de Packetbeat →
CVE-2026-115297
NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially…
6.5
Moyenne
CVE-2026-26933
Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of…
5.7
Moyenne
CVE-2026-26932
Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of…
5.7
Moyenne
CVE-2025-68382
Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via…
6.5
Moyenne