Elasticsearch Uncaught Exception leading to crash

GHSA-pw39-f3m5-cxfc · BIT-elasticsearch-2024-23449 · CVE-2024-23449

Published Mar 29, 2024 · Modified May 27, 2025

Description

An uncaught exception in Elasticsearch >= 8.4.0 and < 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch ingest node that attempts to parse the PDF file will crash. This does not happen with password-protected PDF files or with unencrypted PDF files.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-23449
WEB https://github.com/elastic/elasticsearch/commit/a59180459a3cb30b71399d778943cab4ac2191c4
WEB https://github.com/elastic/elasticsearch/commit/f9bf18a716613473fc1cb96c838874e1f9f6ba22
WEB https://discuss.elastic.co/t/elasticsearch-8-11-1-security-update-esa-2024-05/356458
PACKAGE https://github.com/elastic/elasticsearch

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes