CVE-2023-32716: Denial of Service via the 'dump' SPL command
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the {{dump}} SPL command to cause a denial of service by crashing the Splunk daemon.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-32716?
CVE-2023-32716 is a vulnerability in Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100 that allows an attacker to cause a denial of service by crashing the Splunk daemon.
How severe is CVE-2023-32716?
CVE-2023-32716 is considered a medium severity vulnerability with a CVSS score of 6.5.
How can an attacker exploit CVE-2023-32716?
An attacker can exploit CVE-2023-32716 by using the {{dump}} SPL command to crash the Splunk daemon.
Which versions of Splunk Enterprise are affected by CVE-2023-32716?
Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14 are affected by CVE-2023-32716.
Which versions of Splunk Cloud Platform are affected by CVE-2023-32716?
Splunk Cloud Platform versions below 9.0.2303.100 are affected by CVE-2023-32716.