Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-176)
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All versions from 9.0.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.3 Affected Configurations: All configurations where authenticated users have privileges to invoke index analysis APIs. Solutions and Mitigations: The issue is resolved in version 8.19.22, 9.4.7, 9.5.4. For Users…
Elastic Security Announcementsで読む
| 情報源 | Elastic Security Announcements |
|---|---|
| 取得日時 | 2026/10/22 01:17 |
| データ | Markdown JSON |
2026/09/25 17:33、Elastic Security Announcementsが「Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-176)」を公開しました (種別: 脆弱性アドバイザリ)。関連する技術: Elasticsearch / OpenSearch。