CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2023-31418

An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering and we have no indication that the issue is known or that it is being exploited in the wild.

Score
7.5 high
Published
2023-10-26
Links
NVD · cve.org

Matched ports (1)

PortPackageVersionStatusMaintainer
textproc/py-elasticsearch6py312-elasticsearch66.8.2_2unaddressedsunpoet@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>py312-elasticsearch6</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>An issue has been identified with how Elasticsearch handled incoming
	requests on the HTTP layer. An unauthenticated user could force an
	Elasticsearch node to exit with an OutOfMemory error by sending a
	moderate number of malformed HTTP requests. The issue was identified
	by Elastic Engineering and we have no indication that the issue is
	known or that it is being exploited in the wild.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2023-31418</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2023-31418</url>
    </references>
    <dates>
      <discovery>2023-10-26</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>