A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash. A successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences
    function of the PatternBank class could cause the Elasticsearch node to crash. A successful attack
    requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.
    (CVE-2024-52980)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences     function of the PatternBank class could cause the Elasticsearch node to crash. A successful attack     requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.
    (CVE-2024-52980)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
459607	Echo: org.elasticsearch:elasticsearch: security update to 8.15.1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
459607	Echo: org.elasticsearch:elasticsearch: security update to 8.15.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
261918	Linux Distros Unpatched Vulnerability : CVE-2024-52980	Nessus	Misc.	Local	medium
424816	SCA: security update for org.elasticsearch:elasticsearch (GHSA-ghfh-p92w-j4mg)	Tenable Cloud Security	SCA Checks	Local	medium
424816	SCA: security update for org.elasticsearch:elasticsearch (GHSA-ghfh-p92w-j4mg)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2024-52980

medium

Tenable Plugins

medium

medium

medium

medium

medium