{"id":"CVE-2022-23712","published":"2022-06-06T17:07:29Z","modified":"2024-08-03T03:51:45Z","title":"A Denial of Service flaw was discovered in Elasticsearch","vendor":"Elastic","product":"elasticsearch","tier":"tail","description":{"text":"A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0755,"percentile":0.94494,"provenance":"source"},"cwes":[{"id":"CWE-754","name":"Improper Check for Unusual or Exceptional Conditions"}],"references":[{"url":"https://www.elastic.co/community/security/","tags":["x_refsource_MISC"]},{"url":"https://discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20220707-0010/","tags":["x_refsource_CONFIRM"]}],"priority":{"score":18.9,"factors":[{"name":"EPSS percentile","points":18.9}]},"vendorSlug":"elastic","affectedVersions":[{"vendor":"Elastic","product":"elasticsearch","versions":["versions 8.0.0 through 8.2.0"]}],"affected":[{"ecosystem":"Maven","package":"org.elasticsearch:elasticsearch","vulnerableRanges":[">=8.0.0, <8.2.1"],"patched":["8.2.1"],"from":["GHSA-wh6w-69xc-5rq5"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-6175","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2021-22144","published":"2021-07-26","fixed":"7.13.3","kev":false},{"cve":"CVE-2021-22147","published":"2021-09-15","fixed":"7.14.0","kev":false},{"cve":"CVE-2022-23708","published":"2022-03-03","fixed":"7.17.1","kev":false},{"cve":"CVE-2022-23712","published":"2022-06-06","fixed":"8.2.1","kev":false},{"cve":"CVE-2023-31418","published":"2023-10-26","fixed":"8.9.0","kev":false,"link":{"from":"CVE-2022-23712","to":"CVE-2023-31418","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.elasticsearch:elasticsearch","fromFixed":"8.2.1","toFixed":"8.9.0","daysApart":507}]}},{"cve":"CVE-2023-31419","published":"2023-10-26","fixed":"8.9.1","kev":false},{"cve":"CVE-2023-31417","published":"2023-10-26","fixed":"8.9.2","kev":false}],"package":"Maven:org.elasticsearch:elasticsearch"}}