Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2021-22144 — MEDIUM severity vulnerability | Release Alert

CVE-2021-22144

6.5

MEDIUMCVSS v3

Published

July 26, 2021

CVSS v2

4 MEDIUM

Affected

11 projects

Assigned by

[email protected]

Severity scale

010

Description

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.

elastic/elasticsearch

GitHubFree and Open Source, Distributed, RESTful Search Engine

< 6.8.17, >= 7.0.0, < 7.13.3NVD

elasticsearch

NPMThe official low-level Elasticsearch client for Node.js and the browser.

< 6.8.17, >= 7.0.0, < 7.13.3NVD

ElasticSearch

More on this CVE

NVD↗GitHub Advisory↗

NuGet Gallery

Elasticsearch is a flexible and powerful open source, distributed, real-time search and analytics engine.

< 6.8.17, >= 7.0.0, < 7.13.3NVD

Elasticsearch

Chocolatey## The heart of the free and open Elastic Stack Elasticsearch is a distributed, RESTful search and analytics engine capable of addressing a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data for lightning fast search, fine‑tuned relevancy, and powerful analytics that scale with ease. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.

< 6.8.17, >= 7.0.0, < 7.13.3NVD