CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2017-11480
Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- CWE
- CWE-404
- Published
- Modified
- Record from
- the NVD, synced
Affected
- elasticsearch:packetbeat
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9q3g-m353-cp4p | Go | github.com/elastic/beats | <5.6.4 | 5.6.4 |
| GHSA-9q3g-m353-cp4p | Go | github.com/elastic/beats | >=6.0.0-alpha1 <6.0.0 | 6.0.0 |
| GO-2022-0643 | Go | github.com/elastic/beats | <6.1.0+incompatible | 6.1.0+incompatible |