CVE-2019-7620
published 2019-10-30CVE-2019-7620: Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is able to connect to…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.53%
71.6th percentile
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is able to connect to the port the Logstash beats input could send a specially crafted network packet that would cause Logstash to stop responding.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| elastic | logstash | — | — |
| elastic | logstash | >= 6.0.0 < 6.8.4 | 6.8.4 |
| elastic | logstash | >= 7.0.0 < 7.4.1 | 7.4.1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://discuss.elastic.co/t/elastic-stack-6-8-4-security-update/204908https://discuss.elastic.co/t/elastic-stack-7-4-1-security-update/204909https://www.elastic.co/community/securityhttps://discuss.elastic.co/t/elastic-stack-6-8-4-security-update/204908https://discuss.elastic.co/t/elastic-stack-7-4-1-security-update/204909https://www.elastic.co/community/security
2019-10-30
Published