A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type. Under certain circumstances, ingesting documents in this index would cause a StackOverflow exception to be thrown and ultimately lead to a Denial of Service. Note that passthrough fields is an experimental feature.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a     dynamic field mapping of passthrough type. Under certain circumstances, ingesting documents in this     index would cause a StackOverflow exception to be thrown and ultimately lead to a Denial of Service. Note     that passthrough fields is an experimental feature. (CVE-2024-37280)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a
    dynamic field mapping of “passthrough” type. Under certain circumstances, ingesting documents in this
    index would cause a StackOverflow exception to be thrown and ultimately lead to a Denial of Service. Note
    that passthrough fields is an experimental feature. (CVE-2024-37280)

The version of Elasticsearch installed on the remote host is between 8.13.1 and 8.13.4. It is, therefore, affected by a denial of service (DoS) vulnerability as referenced in the ESA-2024-14 advisory:

  - A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a   dynamic field mapping of “passthrough” type. Under certain circumstances, ingesting documents in this index   would cause a StackOverflow exception to be thrown and ultimately lead to a Denial of Service. Note that   passthrough fields is an experimental feature. (CVE-2024-37280)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
249670	Linux Distros Unpatched Vulnerability : CVE-2024-37280	Nessus	Misc.	Local	medium
410327	SCA: security update for org.elasticsearch:elasticsearch (GHSA-4q22-422g-m4pj)	Tenable Cloud Security	SCA Checks	Local	medium
410327	SCA: security update for org.elasticsearch:elasticsearch (GHSA-4q22-422g-m4pj)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
200480	Elasticsearch 8.13.1 <= 8.13.4 DoS (ESA-2024-14)	Nessus	Misc.	Combined	medium

Detections

Analytics

CVE-2024-37280

medium

Tenable Plugins

medium

medium

medium

medium