AZL-106718
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-106718.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-106718
- Upstream
- CVE-2026-102404
- Published
- 2026-10-06T20:17:12Z
- Modified
- 2026-10-07T14:17:13Z
- Summary
- CVE-2026-102404 affecting package rubygem-elasticsearch 8.9.0-1
- Details
-
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an out-of-memory condition that terminates the Elasticsearch node. The condition can be triggered repeatedly, including by queries embedded in shared resources, causing persistent cluster unavailability.
- References