CVE-2024-37280

Elasticsearch StackOverflow vulnerability

A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type. Under certain circumstances, ingesting documents in this index would cause a StackOverflow exception to be thrown and ultimately lead to a Denial of Service. Note that passthrough fields is an experimental feature.

We have discovered 1 live websites that are affected by CVE-2024-37280.

Run a Free Instant Scan



Affected Software

Product  Elastic
Category Search Engines
Vulnerable Domains1 live websites (4.00% of Elastic install base)
Vulnerable Versions
  • from 8.13.1 through 8.13.4
Vulnerable Versions Count0 versions ( less than 0.1% of all versions)


Common Weakness Enumeration

CWE-122 Heap-based Buffer Overflow



Details

  • Published - Jun 13, 2024
  • Updated - Aug 16, 2024

Website Distribution by Country

Number of websites using CVE-2024-37280
Vietnam1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2024-37280

Top websites that are affected by CVE-2024-37280. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.*****.***.vn Vietnam*,***,***
See full domain list

FAQ

CVE-2024-37280 is Heap-based Buffer Overflow in Elastic
A total of 1 websites have been identified as vulnerable to CVE-2024-37280, based on global website indexing conducted by WebTechSurvey.
The Elastic is affected by the CVE-2024-37280 vulnerability.
Elastic versions up to and including 8.13.4 are vulnerable to CVE-2024-37280.