CVE-2024-43709: Elasticsearch allocation of resources without limits or throttling leads to crash
An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43709?
CVE-2024-43709 is classified as a critical vulnerability due to the potential for an OutOfMemoryError that can cause system crashes.
How do I fix CVE-2024-43709?
To fix CVE-2024-43709, you should upgrade to Elasticsearch version 8.13.3 or 7.17.21.
What causes CVE-2024-43709 in Elasticsearch?
CVE-2024-43709 is caused by an allocation of resources without limits or throttling when processing specially crafted SQL queries.
Which versions of Elasticsearch are affected by CVE-2024-43709?
CVE-2024-43709 affects Elasticsearch versions from 7.17.0 up to and including 7.17.21, and from 8.0.0 to 8.13.3.
What are the potential impacts of CVE-2024-43709?
The potential impacts of CVE-2024-43709 include application crashes and service downtime due to OutOfMemoryError exceptions.