medium6.5
CVE-2024-43709
Elasticsearch allocation of resources without limits or throttling leads to crash
Impact
An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.elasticsearch:elasticsearch | < 7.17.21 | 7.17.21 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Elasticsearch | from 7.17.0 before 7.17.21 from 8.0.0 before 8.13.3 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442
- https://security.netapp.com/advisory/ntap-20250221-0007/
- https://github.com/advisories/GHSA-jgx4-7v3v-vwfm
- https://nvd.nist.gov/vuln/detail/CVE-2024-43709
- https://security.netapp.com/advisory/ntap-20250221-0007