CVE-2017-11480CWE-404

Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler

published December 8, 2017

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01436 · 72.9th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2017-12-08T18:00Z
EPSS history
Timeline
  • 08 DEC 18:00Z
    Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler
    cvelistv5