CVE-2017-11480
Fixed upstream EPSS 1%
Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.
Products: Elastic Packetbeat
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/elastic/beats | 5.6.4 |
| Go | github.com/elastic/beats | 6.0.0 |
| Go | github.com/elastic/beats | 6.1.0+incompatible |