Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-43709

Elasticsearch allocation of resources without limits or throttling leads to crash

Description

An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Elasticsearch

Default version status: unaffected

  • 7.17.0, 8.0.0 to < 7.17.21, 8.13.3affected

References