Aller au contenu
en Se connecter
5.7 Moyenne

CVE-2026-26933 Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of…

Description

Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker with the ability to send specially crafted, malformed network packets to a monitored network interface can trigger out-of-bounds read operations, resulting in application crashes or resource exhaustion. This requires the attacker to be positioned on the same network segment as the Packetbeat deployment or to control traffic routed to monitored interfaces.

Produits et versions touchés

Produit Versions touchées Corrigé en
Packetbeat 9.0 9.0.0 → 9.2.4 Pas de correctif indiqué
Packetbeat 8.0 8.0.0 → 8.19.10 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Packetbeat

Les 8 CVE de Packetbeat →
CVE-2026-115297 NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially… 6.5 Moyenne CVE-2026-26932 Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of… 5.7 Moyenne CVE-2026-0529 Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause… 6.5 Moyenne CVE-2025-68382 Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via… 6.5 Moyenne
Suivre cette CVE