CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the…

published July 26, 2021

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02442 · 84.2th percentile
Published
2021-07-26T11:48Z
EPSS history
Timeline
  • 26 JUL 11:48Z
    In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the…
    cvelistv5