Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Validation of Array Index in Packetbeat Leading to Denial of Service
Vulnerability Description
Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker with the ability to send specially crafted, malformed network packets to a monitored network interface can trigger out-of-bounds read operations, resulting in application crashes or resource exhaustion. This requires the attacker to be positioned on the same network segment as the Packetbeat deployment or to control traffic routed to monitored interfaces.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
对数组索引的验证不恰当
Vulnerability Title
Elastic Packetbeat 安全漏洞
Vulnerability Description
Elastic Packetbeat是荷兰Elastic公司的一个数据采集器。 Elastic Packetbeat存在安全漏洞，该漏洞源于多个协议解析器组件存在数组索引验证不当问题，可能导致通过输入数据操纵触发越界读取，造成应用程序崩溃或资源耗尽。
CVSS Information
N/A
Vulnerability Type
N/A