CVE-2024-23450

Fixed in a distro release EPSS 1%CVSS 4.9

A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.

Published 2024-03-27 · CVE record · OSV

Products: Elasticsearch

Fixed upstream

Ecosystem	Package	Fixed in
Maven	org.elasticsearch:elasticsearch	7.17.19
Maven	org.elasticsearch:elasticsearch	8.13.0

Distro releases

Release	Package	Fixed in
Chainguard	elasticsearch-8	8.13.1-r0
Chainguard	elasticsearch-8-bitnami	8.13.1-r0
Chainguard	elasticsearch-8-config	8.13.1-r0
Chainguard	elasticsearch-8-iamguarded	8.13.1-r0
Chainguard	elasticsearch-config	8.13.1-r0
Chainguard	trino	444-r0
Chainguard	trino-config	444-r0
Chainguard	trino-oci-entrypoint	444-r0
Chainguard	trino-plugin-accumulo	444-r0
Chainguard	trino-plugin-ai-functions	444-r0
Chainguard	trino-plugin-atop	444-r0
Chainguard	trino-plugin-bigquery	444-r0
Chainguard	trino-plugin-blackhole	444-r0
Chainguard	trino-plugin-cassandra	444-r0
Chainguard	trino-plugin-clickhouse	444-r0
Chainguard	trino-plugin-delta-lake	444-r0
Chainguard	trino-plugin-druid	444-r0
Chainguard	trino-plugin-duckdb	444-r0
Chainguard	trino-plugin-elasticsearch	444-r0
Chainguard	trino-plugin-example-http	444-r0
Chainguard	trino-plugin-exasol	444-r0
Chainguard	trino-plugin-exchange-filesystem	444-r0
Chainguard	trino-plugin-exchange-hdfs	444-r0
Chainguard	trino-plugin-faker	444-r0
Chainguard	trino-plugin-functions-python	444-r0
Chainguard	trino-plugin-geospatial	444-r0
Chainguard	trino-plugin-google-sheets	444-r0
Chainguard	trino-plugin-hive	444-r0
Chainguard	trino-plugin-http-event-listener	444-r0
Chainguard	trino-plugin-http-server-event-listener	444-r0
Chainguard	trino-plugin-hudi	444-r0
Chainguard	trino-plugin-iceberg	444-r0
Chainguard	trino-plugin-ignite	444-r0
Chainguard	trino-plugin-jmx	444-r0
Chainguard	trino-plugin-kafka	444-r0
Chainguard	trino-plugin-kafka-event-listener	444-r0
Chainguard	trino-plugin-kinesis	444-r0
Chainguard	trino-plugin-kudu	444-r0
Chainguard	trino-plugin-lakehouse	444-r0
Chainguard	trino-plugin-ldap-group-provider	444-r0
Chainguard	trino-plugin-local-file	444-r0
Chainguard	trino-plugin-loki	444-r0
Chainguard	trino-plugin-mariadb	444-r0
Chainguard	trino-plugin-memory	444-r0
Chainguard	trino-plugin-ml	444-r0
Chainguard	trino-plugin-mongodb	444-r0
Chainguard	trino-plugin-mysql	444-r0
Chainguard	trino-plugin-mysql-event-listener	444-r0
Chainguard	trino-plugin-opa	444-r0
Chainguard	trino-plugin-openlineage	444-r0
Chainguard	trino-plugin-opensearch	444-r0
Chainguard	trino-plugin-oracle	444-r0
Chainguard	trino-plugin-password-authenticators	444-r0
Chainguard	trino-plugin-phoenix5	444-r0
Chainguard	trino-plugin-pinot	444-r0
Chainguard	trino-plugin-postgresql	444-r0
Chainguard	trino-plugin-prometheus	444-r0
Chainguard	trino-plugin-ranger	444-r0
Chainguard	trino-plugin-raptor-legacy	444-r0
Chainguard	trino-plugin-redis	444-r0
Chainguard	trino-plugin-redshift	444-r0
Chainguard	trino-plugin-resource-group-managers	444-r0
Chainguard	trino-plugin-session-property-managers	444-r0
Chainguard	trino-plugin-singlestore	444-r0
Chainguard	trino-plugin-snowflake	444-r0
Chainguard	trino-plugin-spooling-filesystem	444-r0
Chainguard	trino-plugin-sqlserver	444-r0
Chainguard	trino-plugin-teradata-functions	444-r0
Chainguard	trino-plugin-thrift	444-r0
Chainguard	trino-plugin-tpcds	444-r0
Chainguard	trino-plugin-tpch	444-r0
Chainguard	trino-plugin-vertica	444-r0
Ubuntu 16.04 LTS	elasticsearch	no fix
Wolfi	trino	444-r0
Wolfi	trino-config	444-r0
Wolfi	trino-oci-entrypoint	444-r0
Wolfi	trino-plugin-accumulo	444-r0
Wolfi	trino-plugin-ai-functions	444-r0
Wolfi	trino-plugin-atop	444-r0
Wolfi	trino-plugin-bigquery	444-r0
Wolfi	trino-plugin-blackhole	444-r0
Wolfi	trino-plugin-cassandra	444-r0
Wolfi	trino-plugin-clickhouse	444-r0
Wolfi	trino-plugin-delta-lake	444-r0
Wolfi	trino-plugin-druid	444-r0
Wolfi	trino-plugin-duckdb	444-r0
Wolfi	trino-plugin-elasticsearch	444-r0
Wolfi	trino-plugin-example-http	444-r0
Wolfi	trino-plugin-exasol	444-r0
Wolfi	trino-plugin-exchange-filesystem	444-r0
Wolfi	trino-plugin-exchange-hdfs	444-r0
Wolfi	trino-plugin-faker	444-r0
Wolfi	trino-plugin-functions-python	444-r0
Wolfi	trino-plugin-geospatial	444-r0
Wolfi	trino-plugin-google-sheets	444-r0
Wolfi	trino-plugin-hive	444-r0
Wolfi	trino-plugin-http-event-listener	444-r0
Wolfi	trino-plugin-http-server-event-listener	444-r0
Wolfi	trino-plugin-hudi	444-r0
Wolfi	trino-plugin-iceberg	444-r0
Wolfi	trino-plugin-ignite	444-r0
Wolfi	trino-plugin-jmx	444-r0
Wolfi	trino-plugin-kafka	444-r0
Wolfi	trino-plugin-kafka-event-listener	444-r0
Wolfi	trino-plugin-kinesis	444-r0
Wolfi	trino-plugin-kudu	444-r0
Wolfi	trino-plugin-lakehouse	444-r0
Wolfi	trino-plugin-ldap-group-provider	444-r0
Wolfi	trino-plugin-local-file	444-r0
Wolfi	trino-plugin-loki	444-r0
Wolfi	trino-plugin-mariadb	444-r0
Wolfi	trino-plugin-memory	444-r0
Wolfi	trino-plugin-ml	444-r0
Wolfi	trino-plugin-mongodb	444-r0
Wolfi	trino-plugin-mysql	444-r0
Wolfi	trino-plugin-mysql-event-listener	444-r0
Wolfi	trino-plugin-opa	444-r0
Wolfi	trino-plugin-openlineage	444-r0
Wolfi	trino-plugin-opensearch	444-r0
Wolfi	trino-plugin-oracle	444-r0
Wolfi	trino-plugin-password-authenticators	444-r0
Wolfi	trino-plugin-phoenix5	444-r0
Wolfi	trino-plugin-pinot	444-r0
Wolfi	trino-plugin-postgresql	444-r0
Wolfi	trino-plugin-prometheus	444-r0
Wolfi	trino-plugin-ranger	444-r0
Wolfi	trino-plugin-raptor-legacy	444-r0
Wolfi	trino-plugin-redis	444-r0
Wolfi	trino-plugin-redshift	444-r0
Wolfi	trino-plugin-resource-group-managers	444-r0
Wolfi	trino-plugin-session-property-managers	444-r0
Wolfi	trino-plugin-singlestore	444-r0
Wolfi	trino-plugin-snowflake	444-r0
Wolfi	trino-plugin-spooling-filesystem	444-r0
Wolfi	trino-plugin-sqlserver	444-r0
Wolfi	trino-plugin-teradata-functions	444-r0
Wolfi	trino-plugin-thrift	444-r0
Wolfi	trino-plugin-tpcds	444-r0
Wolfi	trino-plugin-tpch	444-r0
Wolfi	trino-plugin-vertica	444-r0