Skip to content
OpenAdvisories

Product · Elastic

Filebeat

3 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.5

    Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service

    Allocation of Resources Without Limits or Throttling (CWE-770) in Filebeat can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests th…

  • Medium 6.5

    Filebeat Improper Validation of Specified Index, Position, or Offset in Input

    Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Dissect processor can allow a user to trigger a Buffer Overflow (CAPEC-100) and cause a denial of service (panic/crash) of the Filebeat p…

  • Medium 5.5

    Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or …