CVE-2016-10363CWE-248

Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could…

published June 16, 2017

CVSS
—
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance. The errors resulting from these crafted inputs are not handled by the codec and can cause the Logstash process to exit.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01533 · 74.6th percentile
Weakness
CWE-248 · Uncaught Exception
Published
2017-06-16T21:00Z
EPSS history
Timeline
  • 16 JUN 21:00Z
    Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could…
    cvelistv5