CVE-2021-22144
In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.
| Software | From | Fixed in |
|---|---|---|
| elastic / elasticsearch | - | 6.8.17 |
| elastic / elasticsearch | 7.0.0 | 7.13.3 |
| oracle / communications_cloud_native_core_automated_test_suite | 1.8.0 | 1.8.0.x |
org.elasticsearch / elasticsearch
|
- | 6.8.17 |
|
org.elasticsearch / elasticsearch
|
7.0.0-alpha1 | 7.13.3 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime