CVE-2024-52979 — Elasticsearch Uncontrolled Resource Consumption vulnerability

CVE-2024-52979

Elasticsearch Uncontrolled Resource Consumption vulnerability PUBLISHED

Description (CNA)

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash.

Affected (CNA)

Vendor / product	Versions
Elastic / Elasticsearch	affected 7.17.0 before 7.17.25; affected 8.0.0 before 8.16.0

CWE

CWE-400

References

https://discuss.elastic.co/t/elasticsearch-7-17-25-and-8-16-0-security-update-esa-2024-40/377709

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.