Vulnerabilities > CVE-2017-11480 - Unspecified vulnerability in Elasticsearch Packetbeat

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

elasticsearch

NVD

Published: 2017-12-08

Updated: 2024-11-21

Summary

Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.

Vulnerable Configurations

Part	Description	Count
Application	Elasticsearch Elasticsearch Packetbeat 0.1.0 Elasticsearch Packetbeat 0.1.1 Elasticsearch Packetbeat 0.2.0 Elasticsearch Packetbeat 0.2.1 Elasticsearch Packetbeat 0.2.2 Elasticsearch Packetbeat 0.3.0 Elasticsearch Packetbeat 0.3.1 Elasticsearch Packetbeat 0.3.2 Elasticsearch Packetbeat 0.3.3 Elasticsearch Packetbeat 0.4.0 Elasticsearch Packetbeat 0.4.1 Elasticsearch Packetbeat 0.4.2 Elasticsearch Packetbeat 0.4.3 Elasticsearch Packetbeat 0.5.0 Elasticsearch Packetbeat 1.0.0 Elasticsearch Packetbeat 1.0.1 Elasticsearch Packetbeat 1.1.0 Elasticsearch Packetbeat 1.1.1 Elasticsearch Packetbeat 1.1.2 Elasticsearch Packetbeat 1.2.0 Elasticsearch Packetbeat 1.2.1 Elasticsearch Packetbeat 1.2.2 Elasticsearch Packetbeat 1.2.3 Elasticsearch Packetbeat 1.3.0 Elasticsearch Packetbeat 1.3.1 Elasticsearch Packetbeat 5.0.0 Elasticsearch Packetbeat 5.0.1 Elasticsearch Packetbeat 5.0.2 Elasticsearch Packetbeat 5.1.1 Elasticsearch Packetbeat 5.1.2 Elasticsearch Packetbeat 5.2.0 Elasticsearch Packetbeat 5.2.1 Elasticsearch Packetbeat 5.2.2 Elasticsearch Packetbeat 5.3.0 Elasticsearch Packetbeat 5.3.1 Elasticsearch Packetbeat 5.3.2 Elasticsearch Packetbeat 5.3.3 Elasticsearch Packetbeat 5.4.0 Elasticsearch Packetbeat 5.4.1 Elasticsearch Packetbeat 5.4.2 Elasticsearch Packetbeat 5.4.3 Elasticsearch Packetbeat 5.5.0 Elasticsearch Packetbeat 5.5.1 Elasticsearch Packetbeat 5.5.2 Elasticsearch Packetbeat 5.5.3 Elasticsearch Packetbeat 5.6.0 Elasticsearch Packetbeat 5.6.1 Elasticsearch Packetbeat 5.6.2 Elasticsearch Packetbeat 5.6.3	62

Summary

Vulnerable Configurations

References