PT-2025-52355 · Elastic+1 · Packetbeat+1

Ismisepaul + 1 · Published 2025-12-18 · Updated 2026-03-10 · CVE-2025-68388

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Packetbeat (affected versions not specified)

Description An unauthenticated remote attacker can cause excessive allocation of memory and CPU resources in Packetbeat through the manipulation of malicious IPv4 fragments. This resource exhaustion can lead to a degradation in the performance of the software. The issue involves a lack of limits or throttling during resource allocation, as described by CWE-770 and CAPEC-130.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-03567

CVE-2025-68388

GHSA-FJ69-23M4-CCVV

GO-2025-4253

SUSE-SU-2026:0292-1

Affected Products

Packetbeat

Red Os

References · 37

• https://nvd.nist.gov/vuln/detail/CVE-2025-68388 · Security Note
• https://osv.dev/vulnerability/GHSA-fj69-23m4-ccvv · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03567 · Security Note
• https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4253 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0292-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68388 · Vendor Advisory
• https://github.com/elastic/beats · Note
• https://github.com/elastic/beats/commit/28cfc80d2f4e80bfd1c72eb3f849d777751ab870 · Note
• https://suse.com/security/cve/CVE-2026-23511 · Note
• https://twitter.com/VulmonFeeds/status/2001923301392654425 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1pt1cm5/resumen_diario_de_vulnerabilidades_22122025 · Reddit Post
• https://github.com/advisories/GHSA-fj69-23m4-ccvv · Note
• https://suse.com/security/cve/CVE-2026-22045 · Note
• https://suse.com/security/cve/CVE-2025-68388 · Note