Vulnetix
Try Vulnetix Request Demo
CVE-2021-22144 PUBLISHED

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.

EPSS 0.21% · 43.5th percentile

Risk Scores

EPSS Score
0.21%
43.5th percentile

Affected Products

VendorProductVersions
Bitnamielasticsearch0, 7.0.0, 0
Bitnamielasticsearch0, 7.0.0

Timeline

References

Open in Interactive Console →