NA

CVE-2023-31419

Published: 26/10/2023 Updated: 01/02/2024
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

A flaw exists in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

elastic elasticsearch

Vendor Advisories

Description<!---->A flaw was found in Elasticsearch This issue affects the _search API that allowed a specially crafted query string to cause a stack overflow and, ultimately, a denial of serviceA flaw was found in Elasticsearch This issue affects the _search API that allowed a specially crafted query string to cause a stack overflow and, ultima ...

Exploits

Elasticsearch version 853 stack overflow proof of concept exploit ...

Github Repositories

Elasticsearch Stack Overflow Vulnerability

Elasticsearch StackOverflow vulnerability A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service Affected Versions: Elasticsearch versions from 700 to 71712 and from 800 to 890 Solutions and Mitigations: The issue is resolved in Elasticsearch 71713 an

Elasticsearch DoS CVE-2023-31419 exploit

Elasticsearch CVE 2023-31419 PoC