CVE-2024-23449: Elasticsearch Uncaught Exception
Published Mar 29, 2024
·Updated
An uncaught exception in Elasticsearch >= 8.4.0 and < 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch ingest node that attempts to parse the PDF file will crash. This does not happen with password-protected PDF files or with unencrypted PDF files.
Affected Software
2 affected componentsFixes available
Elastic Elasticsearch>=8.4.0<8.11.1
maven/org.elasticsearch:elasticsearch>=8.4.0<8.11.1
8.11.1
Event History
Mar 29, 2024
CVE Published
via MITRE·11:12 AM
Data Sourced
via MITRE·11:12 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·12:30 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-23449?
The severity of CVE-2024-23449 is considered critical due to the potential for crashing the Elasticsearch service.
2
How do I fix CVE-2024-23449?
To fix CVE-2024-23449, you should upgrade your Elasticsearch instance to version 8.11.1 or later.
3
What software versions are affected by CVE-2024-23449?
CVE-2024-23449 affects Elasticsearch versions 8.4.0 through 8.11.0.
4
What happens if I attempt to process an encrypted PDF with CVE-2024-23449?
Attempting to process an encrypted PDF will cause the Elasticsearch ingest node to crash.
5
Are password-protected PDFs affected by CVE-2024-23449?
No, password-protected PDFs are not affected by CVE-2024-23449.