PT-2023-5274 · Elastic · Elasticsearch

Rodrigo_Silva · Published 2023-09-18 · Updated 2024-03-06 · CVE-2023-31419

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description A flaw was discovered in Elasticsearch, affecting the search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service. The vulnerability is related to reading data beyond the buffer boundaries in memory. Exploitation of the vulnerability may allow a remote attacker to cause a denial of service by sending a specially crafted API request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2023-05895

BIT-ELASTICSEARCH-2023-31419

CVE-2023-31419

GHSA-QWRX-45XF-JJF7

Affected Products

Elasticsearch

References · 23

• 🔥 https://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419 · Exploit
• 🔥 https://github.com/tahaafarooq/gallery3d-tecno-exploit · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-31419 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-31419 · Security Note
• https://ubuntu.com/security/CVE-2023-31419 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-31419 · Vendor Advisory
• https://discuss.elastic.co/t/elasticsearch-8-9-1-7-17-13-security-update/343297 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qwrx-45xf-jjf7 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05895 · Security Note
• https://elastic.co/community/security · Vendor Advisory
• https://osv.dev/vulnerability/BIT-elasticsearch-2023-31419 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-31419 · Vendor Advisory
• https://t.me/cibsecurity/72995 · Telegram Post
• https://twitter.com/hack_git/status/1706194599243616276 · Twitter Post
• https://twitter.com/vxremalware/status/1704536362630746524 · Twitter Post