Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-31419

Elasticsearch StackOverflow vulnerability

Description

A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Elasticsearch

Default version status: unaffected

  • 7.0.0 to < 7.17.12affected
  • 8.0.0 to < 8.9.0affected

References