VDB

GO-2025-4253

GO-2025-4253 PUBLISHED

Elasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 Fragments in github.com/elastic/beats

Affected Products

VendorProductVersions
chainguardbeats-fips-8.19*, *
chainguardcloudbeat-fips-9.20, 0
chainguardbeats-8.19*, *
chainguardbeats-fips-9.3*, *
chainguardelastic-agent-fips-8.190
chainguardapm-server-fips-8.190, 0
chainguardagentbeat-fips*, *
chainguardbeats-fips-9.4*, *
chainguardbeats-9.3*, *
chainguardapm-server-fips-9.20, 0
chainguardcloudbeat-8.190, 0
chainguardbeats-9.4*, *
github.comelastic/beats0, 0
chainguardelastic-agent0
chainguardbeats-fips-9.5*
chainguardapm-server-9.20, 0
chainguardbeats-9.1*, *
chainguardcloudbeat-9.20, 0
chainguardcloudbeat-9.3*, *
chainguardbeats-fips-9.1*, *

…and 8 more

Timeline

  • Jan 23, 2026 CVE Published
  • Feb 4, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›