Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-68388

Fixed in a distro release EPSS <1%CVSS 5.3

Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.

Published 2025-12-18 · CVE record · OSV

Products: Elastic Packetbeat

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/elastic/beats8.19.9
Gogithub.com/elastic/beats9.1.9
Gogithub.com/elastic/beats9.2.3
Gogithub.com/elastic/beatsno fix
Gogithub.com/elastic/beats/v77.0.0-alpha2.0.20251209162832-28cfc80d2f4e

Distro releases

ReleasePackageFixed in
Chainguardagentbeat0
Chainguardagentbeat-fips0
Chainguardapm-server-8.17no fix
Chainguardapm-server-8.18no fix
Chainguardapm-server-8.198.19.11-r0
Chainguardapm-server-9.0no fix
Chainguardapm-server-9.1no fix
Chainguardapm-server-9.29.2.3-r1
Chainguardapm-server-9.2-compat9.2.3-r1
Chainguardapm-server-fips-8.17no fix
Chainguardapm-server-fips-8.18no fix
Chainguardapm-server-fips-8.198.19.11-r0
Chainguardapm-server-fips-9.0no fix
Chainguardapm-server-fips-9.1no fix
Chainguardapm-server-fips-9.29.2.3-r1
Chainguardapm-server-fips-9.2-compat9.2.3-r1
Chainguardauditbeat-8.17no fix
Chainguardauditbeat-8.18no fix
Chainguardauditbeat-8.190
Chainguardauditbeat-8.19-oci-entrypoint0
Chainguardauditbeat-9.0no fix
Chainguardauditbeat-9.10
Chainguardauditbeat-9.1-oci-entrypoint0
Chainguardauditbeat-9.20
Chainguardauditbeat-9.2-oci-entrypoint0
Chainguardauditbeat-9.30
Chainguardauditbeat-9.40
Chainguardauditbeat-fips-8.17no fix
Chainguardauditbeat-fips-8.18no fix
Chainguardauditbeat-fips-8.190
Chainguardauditbeat-fips-9.0no fix
Chainguardauditbeat-fips-9.10
Chainguardauditbeat-fips-9.20
Chainguardauditbeat-fips-9.30
Chainguardauditbeat-fips-9.40
Chainguardauditbeat-fips-9.50
Chainguardbeats-8.190
Chainguardbeats-9.10
Chainguardbeats-9.20
Chainguardbeats-fips-8.190
Chainguardbeats-fips-9.10
Chainguardbeats-fips-9.20
Chainguardcloudbeat-8.17no fix
Chainguardcloudbeat-8.18no fix
Chainguardcloudbeat-8.198.19.12-r0
Chainguardcloudbeat-9.0no fix
Chainguardcloudbeat-9.1no fix
Chainguardcloudbeat-9.29.2.6-r0
Chainguardcloudbeat-9.30
Chainguardcloudbeat-fips-8.17no fix
Chainguardcloudbeat-fips-8.18no fix
Chainguardcloudbeat-fips-8.198.19.12-r0
Chainguardcloudbeat-fips-9.0no fix
Chainguardcloudbeat-fips-9.1no fix
Chainguardcloudbeat-fips-9.29.2.6-r0
Chainguardcloudbeat-fips-9.30
Chainguardelastic-agent9.2.3-r0
Chainguardelastic-agent-8.17no fix
Chainguardelastic-agent-8.18no fix
Chainguardelastic-agent-8.198.19.9-r1
Chainguardelastic-agent-9.0no fix
Chainguardelastic-agent-fips-8.17no fix
Chainguardelastic-agent-fips-8.18no fix
Chainguardelastic-agent-fips-8.198.19.9-r1
Chainguardelastic-agent-fips-9.0no fix
Chainguardfilebeat-8.17no fix
Chainguardfilebeat-8.18no fix
Chainguardfilebeat-8.190
Chainguardfilebeat-8.19-oci-entrypoint0
Chainguardfilebeat-9.0no fix
Chainguardfilebeat-9.10
Chainguardfilebeat-9.1-oci-entrypoint0
Chainguardfilebeat-9.20
Chainguardfilebeat-9.2-oci-entrypoint0
Chainguardfilebeat-9.30
Chainguardfilebeat-9.40
Chainguardfilebeat-fips-8.17no fix
Chainguardfilebeat-fips-8.18no fix
Chainguardfilebeat-fips-8.190
Chainguardfilebeat-fips-9.0no fix
Chainguardfilebeat-fips-9.10
Chainguardfilebeat-fips-9.20
Chainguardfilebeat-fips-9.30
Chainguardfilebeat-fips-9.40
Chainguardfilebeat-fips-9.50
Chainguardheartbeat-8.17no fix
Chainguardheartbeat-8.18no fix
Chainguardheartbeat-8.190
Chainguardheartbeat-8.19-oci-entrypoint0
Chainguardheartbeat-9.0no fix
Chainguardheartbeat-9.10
Chainguardheartbeat-9.1-oci-entrypoint0
Chainguardheartbeat-9.20
Chainguardheartbeat-9.2-oci-entrypoint0
Chainguardheartbeat-9.30
Chainguardheartbeat-9.40
Chainguardheartbeat-fips-8.17no fix
Chainguardheartbeat-fips-8.18no fix
Chainguardheartbeat-fips-8.190
Chainguardheartbeat-fips-8.19-oci-entrypoint0
Chainguardheartbeat-fips-9.0no fix
Chainguardheartbeat-fips-9.10
Chainguardheartbeat-fips-9.1-oci-entrypoint0
Chainguardheartbeat-fips-9.20
Chainguardheartbeat-fips-9.2-oci-entrypoint0
Chainguardheartbeat-fips-9.30
Chainguardheartbeat-fips-9.40
Chainguardheartbeat-fips-9.50
Chainguardmetricbeat-8.17no fix
Chainguardmetricbeat-8.18no fix
Chainguardmetricbeat-8.190
Chainguardmetricbeat-8.19-oci-entrypoint0
Chainguardmetricbeat-9.0no fix
Chainguardmetricbeat-9.10
Chainguardmetricbeat-9.1-oci-entrypoint0
Chainguardmetricbeat-9.20
Chainguardmetricbeat-9.2-oci-entrypoint0
Chainguardmetricbeat-9.30
Chainguardmetricbeat-9.40
Chainguardmetricbeat-fips-8.17no fix
Chainguardmetricbeat-fips-8.18no fix
Chainguardmetricbeat-fips-8.190
Chainguardmetricbeat-fips-9.0no fix
Chainguardmetricbeat-fips-9.10
Chainguardmetricbeat-fips-9.20
Chainguardmetricbeat-fips-9.30
Chainguardmetricbeat-fips-9.40
Chainguardmetricbeat-fips-9.50
openSUSE Leap 15.6govulncheck-vulndb0.0.20260123T022811-150000.1.140.1
openSUSE Leap 16.0govulncheck-vulndb0.0.20260723T184607-160000.1.1