CISA-2025-68388 — Vulnetix

CISA-2025-68388 PUBLISHED CVSS 5.3 MEDIUM

Reported by elastic · Published December 18, 2025

Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.

Risk Scores

CVSS 3.1

5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

Vendor	Product	Versions
Elastic	Packetbeat	8.6.0, 9.0.0, 9.2.0
Elastic	Packetbeat	8.6.0, 9.0.0, 9.2.0

Timeline

Dec 18, 2025 CVE Published
Dec 19, 2025 CVE Updated

References

Open in Interactive Console →