CVE-2022-43572 — Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

CVE-2022-43572

Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise PUBLISHED

Description (CNA)

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk (S2S) or HTTP Event Collector (HEC) protocols to an indexer results in a blockage or denial-of-service preventing further indexing.

Affected (CNA)

Vendor / product	Versions
Splunk / Splunk Enterprise	affected 8.1 before 8.1.12; affected 8.2 before 8.2.9; affected 9.0 before 9.0.2

CWE

CWE-400

References

https://www.splunk.com/en_us/product-security/announcements/svd-2022-1111.html

ADP enrichment

CVE

No English description supplied.

https://www.splunk.com/en_us/product-security/announcements/svd-2022-1111.html

CISA-ADP

No English description supplied.

No references supplied.