PT-2025-52363 · Elastic+1 · Packetbeat+1

Ismisepaul + 1 · Published 2025-12-18 · Updated 2026-03-19 · CVE-2025-68381

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Packetbeat (affected versions not specified)

Description An improper bounds check can lead to a buffer overflow when processing crafted UDP packets containing an invalid fragment sequence number. This allows a remote, unauthenticated attacker to crash the application or cause significant resource exhaustion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2026-05585

CVE-2025-68381

Affected Products

Packetbeat

Red Os

References · 11

• https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-30/384178 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68381 · Security Note
• https://bdu.fstec.ru/vul/2026-05585 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68381 · Vendor Advisory
• https://t.me/cveNotify/146688 · Telegram Post
• https://t.me/CVEtracker/40192 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2001930980282519881 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-beats-cve-2025-68381-8.0 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-beats-cve-2025-68381-7.3 · Note
• https://redos.red-soft.ru/search/?iblock_id=24&q=CVE-2025-68381 · Note
• https://twitter.com/CVEnew/status/2002104275615297630 · Twitter Post