CVE-2025-68388: Packetbeat Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68388?
CVE-2025-68388 is classified as a denial-of-service vulnerability.
How do I fix CVE-2025-68388?
To mitigate CVE-2025-68388, ensure you are using the latest patched version of Packetbeat.
What causes CVE-2025-68388?
CVE-2025-68388 is caused by the allocation of resources without limits or throttling when processing malicious IPv4 fragments.
Who is affected by CVE-2025-68388?
CVE-2025-68388 affects users of Packetbeat versions prior to the security update addressing this vulnerability.
What potential impact does CVE-2025-68388 have?
CVE-2025-68388 can lead to excessive memory and CPU allocation, resulting in a denial-of-service condition.