CVE-2023-31419
Fixed upstream EPSS 62%CVSS 6.5
A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.
Products: Elasticsearch
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.elasticsearch:elasticsearch | 7.17.13 |
| Maven | org.elasticsearch:elasticsearch | 8.9.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | elasticsearch | no fix |