CVE-2017-11480: High severity elasticsearch packetbeat vulnerability
Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-11480?
CVE-2017-11480 is a denial of service flaw in the PostgreSQL protocol handler in Packetbeat versions prior to 5.6.4.
How does CVE-2017-11480 impact Packetbeat?
CVE-2017-11480 allows an attacker to send arbitrary network traffic to the monitored port, which can cause a denial of service condition in Packetbeat.
Which version of Packetbeat is affected by CVE-2017-11480?
Packetbeat versions prior to 5.6.4 are affected by CVE-2017-11480.
How can I mitigate CVE-2017-11480?
To mitigate CVE-2017-11480, you should update Packetbeat to version 5.6.4 or later.
Where can I find more information about CVE-2017-11480?
You can find more information about CVE-2017-11480 in the following reference: [https://discuss.elastic.co/t/beats-5-6-4-security-update/106739]