Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-wh6w-69xc-5rq5: Improper Check for Unusual or Exceptional Conditions in Elasticsearch

A Denial of Service flaw was discovered in Elasticsearch 8.0.0 through 8.2.0. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request. Version 8.2.1 contains a patch.

ghsa
#vulnerability#dos#git#auth

Improper Check for Unusual or Exceptional Conditions in Elasticsearch

High severity GitHub Reviewed Published Jun 7, 2022 • Updated Jun 7, 2022

Related news

CVE-2022-38775: Security issues

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

CVE-2022-23712: Security issues

A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request.