CVE-2025-68390

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

References

https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-37/384185

Affected packages

Git / github.com/elastic/elasticsearch

Affected ranges

Type: GIT
Repo: https://github.com/elastic/elasticsearch
Events: Introduced

1b6a7ece17463df5ff54a3e1302d825889aa1161

Fixed

e34ace04b64e9bfa3f9e785b08e6d81f8efe314b

Database specific

vanir_signatures

[
    {
        "digest": {
            "function_hash": "87673803415819436679596541002810312405",
            "length": 533.0
        },
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "getLength",
            "file": "libs/ssl-config/src/main/java/org/elasticsearch/common/ssl/DerParser.java"
        },
        "source": "https://github.com/elastic/elasticsearch/commit/e34ace04b64e9bfa3f9e785b08e6d81f8efe314b",
        "signature_type": "Function",
        "id": "CVE-2025-68390-7e790cab"
    },
    {
        "digest": {
            "line_hashes": [
                "51550193863884045934320633866015297104",
                "331630246968815451063354319351946329234",
                "186592295080528027987154635525856192062",
                "75995982543764003382939960430245009492"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "libs/ssl-config/src/main/java/org/elasticsearch/common/ssl/DerParser.java"
        },
        "source": "https://github.com/elastic/elasticsearch/commit/e34ace04b64e9bfa3f9e785b08e6d81f8efe314b",
        "signature_type": "Line",
        "id": "CVE-2025-68390-ec99c0f8"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68390.json"