Elastic · Logstash · CVE-2019-7620
**Name of the Vulnerable Software and Affected Versions**
Logstash versions prior to 7.4.1
Logstash versions prior to 6.8.4
**Description**
The issue is a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who can connect to the port the Logstash beats input is using could send a specially crafted network packet, causing Logstash to stop responding.
**Recommendations**
For versions prior to 7.4.1, update to version 7.4.1 or later.
For versions prior to 6.8.4, update to version 6.8.4 or later.