Description
A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type. Under certain circumstances, ingesting documents in this index would cause a StackOverflow exception to be thrown and ultimately lead to a Denial of Service. Note that passthrough fields is an experimental feature.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Elasticsearch | 8.13.1 – ≤ 8.13.4 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | elasticsearch | No fix yet | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | sonarqube-10 | 25.3.0.104237-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.elasticsearch:elasticsearch | >= 8.13.1, < 8.14.0 | 8.14.0 | GHSA-4q22-422g-m4pj |
Advisories 1
- WID-SEC-2024-1314 Elasticsearch: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jun 6, 2024