CVE-2024-43709 — Elasticsearch allocation of resources without limits or throttling leads to crash

CVE-2024-43709

Elasticsearch allocation of resources without limits or throttling leads to crash PUBLISHED

Description (CNA)

An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.

Affected (CNA)

Vendor / product	Versions
Elastic / Elasticsearch	affected 7.17.0, 8.0.0 before 7.17.21, 8.13.3

CWE

CWE-770

References

https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://security.netapp.com/advisory/ntap-20250221-0007/