Elasticsearch Packetbeat

Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.

Improper Validation of Array Index in Packetbeat Leading to Denial of Service

Packetbeat Improper Bounds Check

Packetbeat Out-of-bounds Read

Improper Validation of Array Index in Packetbeat Leading to Denial of Service

Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.