UBUNTU-CVE-2023-46673

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2023-46673

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-46673.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-46673

Related

CVE-2023-46673

Published

2023-11-22T10:15:00Z

Modified

2025-01-13T10:24:24Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

References

Affected packages

Ubuntu:Pro:16.04:LTS / elasticsearch

Package

Name: elasticsearch
Purl: pkg:deb/ubuntu/elasticsearch@1.7.3+dfsg-3?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.6.2+dfsg-1

1.7.3+dfsg-1

1.7.3+dfsg-2

1.7.3+dfsg-3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}