PT-2025-52365 · Elastic+1 · Libbeat+2

Ismisepaul + 1 · Published 2025-12-18 · Updated 2026-03-10 · CVE-2025-68383

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Filebeat (affected versions not specified) Libbeat (affected versions not specified)

Description A flaw exists in the Syslog parser within Filebeat and the Dissect processor in Libbeat that allows for improper validation of input indexes, positions, or offsets. This can lead to a buffer overflow, potentially causing a denial of service by crashing the Filebeat process. The issue can be triggered by sending a malformed Syslog message or using a malicious tokenizer pattern in the Dissect configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-1284

CWE-120

Related Identifiers

BDU:2026-03566

CVE-2025-68383

GHSA-2MJ3-6GRC-PX38

GO-2025-4252

SUSE-SU-2026:0292-1

Affected Products

Filebeat

Libbeat

Red Os

References · 38

• https://discuss.elastic.co/t/filebeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-32/384180 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4252 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2mj3-6grc-px38 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68383 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0292-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68383 · Security Note
• https://bdu.fstec.ru/vul/2026-03566 · Security Note
• https://github.com/elastic/elasticsearch · Note
• https://github.com/elastic/beats/commit/2f971a057eea68e057b47829950cd8c26805df30 · Note
• https://github.com/elastic/beats/commit/339fa3f887a14c91e0c955b50a3b8819393bd632 · Note
• https://github.com/elastic/beats/commit/27a168fb1c598d4a16748e9a7382bc0d197335a5 · Note
• https://reddit.com/r/VulnMatter/comments/1pt1cm5/resumen_diario_de_vulnerabilidades_22122025 · Reddit Post
• https://suse.com/security/cve/CVE-2025-68383 · Note
• https://suse.com/security/cve/CVE-2025-65637 · Note
• https://suse.com/security/cve/CVE-2025-68388 · Note