Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2026-115297 NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially…

Description

NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the Packetbeat process. A single crafted packet is sufficient. No AMQP authentication is necessary. While Packetbeat is not running, it does not collect network telemetry.

Produits et versions touchés

Produit Versions touchées Corrigé en
Packetbeat 9.5 9.5.0 → 9.5.5 Pas de correctif indiqué
Packetbeat 9.0 9.0.0 → 9.4.8 Pas de correctif indiqué
Packetbeat 8.0 8.0.0 → 8.19.23 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Packetbeat

Les 8 CVE de Packetbeat →
CVE-2026-26933 Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of… 5.7 Moyenne CVE-2026-26932 Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of… 5.7 Moyenne CVE-2026-0529 Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause… 6.5 Moyenne CVE-2025-68382 Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via… 6.5 Moyenne
Suivre cette CVE