GO-2025-4253
Elasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 Fragments in github.com/elastic/beats
At a glance
- Published
- Updated
- CVE
- CVE-2025-68388
- Aliases
- GHSA-fj69-23m4-ccvv
Description
Elasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 Fragments in github.com/elastic/beats
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/elastic/beats | introduced 0 |
| Go · github.com/elastic/beats/v7 | introduced 0, fixed 7.0.0-alpha2.0.20251209162832-28cfc80d2f4e |
References
- https://github.com/advisories/GHSA-fj69-23m4-ccvv ADVISORY
- https://github.com/elastic/beats/commit/28cfc80d2f4e80bfd1c72eb3f849d777751ab870 FIX
- https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |