漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers
Vulnerability Description
Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
对数组索引的验证不恰当
Vulnerability Title
Elastic Packetbeat 安全漏洞
Vulnerability Description
Elastic Packetbeat是荷兰Elastic公司的一个数据采集器。 Elastic Packetbeat存在安全漏洞,该漏洞源于MongoDB协议解析器对数组索引验证不当,可能导致缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A