{"id":"EUVD-2025-204397","enisaUuid":"e8037c41-1e19-3aa7-a53a-3733937d6c20","description":"Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.","datePublished":"Dec 18, 2025, 9:33:50 PM","dateUpdated":"Dec 19, 2025, 11:46:39 AM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177\n","aliases":"CVE-2025-68388\nGHSA-fj69-23m4-ccvv\n","assigner":"elastic","epss":0.41,"enisaIdProduct":[{"id":"1a8921fe-d343-3c86-8ed8-2d2211c3110b","product":{"name":"Packetbeat","vendor":{"name":"Elastic"}},"product_version":"8.6.0 ≤8.19.8"},{"id":"b4ea3f27-e6b5-3e88-80f7-807bd8b55cee","product":{"name":"Packetbeat","vendor":{"name":"Elastic"}},"product_version":"9.0.0 ≤9.1.8"},{"id":"d061e4d4-e2fa-3c72-a947-050ccb9f8652","product":{"name":"Packetbeat","vendor":{"name":"Elastic"}},"product_version":"9.2.0 ≤9.2.2"}],"enisaIdVendor":[{"id":"126b03f4-a96c-357c-a722-bfbbc2d2dfb0","vendor":{"name":"Elastic"}}],"enisaIdVulnerability":[{"id":"62afd56d-1e9e-3f32-9a57-ea911fe4ad67","vulnerability":{"id":"GHSA-fj69-23m4-ccvv","description":"Elasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 Fragments","datePublished":"Dec 19, 2025, 12:31:42 AM","dateUpdated":"Dec 20, 2025, 5:30:15 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-68388\nhttps://github.com/elastic/beats/commit/28cfc80d2f4e80bfd1c72eb3f849d777751ab870\nhttps://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177\nhttps://github.com/elastic/beats\n","enisa_id":"EUVD-2025-204397\n","aliases":"CVE-2025-68388\nGHSA-fj69-23m4-ccvv\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:52:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"93ddd2a8-ce72-36e3-a40d-8123ec89cc50","vulnerability":{"id":"CVE-2025-68388","description":"Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.","datePublished":"Dec 18, 2025, 9:33:50 PM","dateUpdated":"Dec 19, 2025, 11:46:39 AM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177\n","enisa_id":"EUVD-2025-204397\n","assigner":"elastic","epss":0.41,"dataProcessed":"Oct 29, 2026, 7:13:14 AM","vulnerabilityProduct":[{"id":"1db892ea-8879-3b12-bab0-0c62f78f115d","product":{"name":"Packetbeat","vendor":{"name":"Elastic"}},"product_version":"8.6.0 ≤8.19.8"},{"id":"9a242a71-6a73-3f08-9763-44ae85654ee3","product":{"name":"Packetbeat","vendor":{"name":"Elastic"}},"product_version":"9.2.0 ≤9.2.2"},{"id":"b436c7ad-3774-3730-9ecd-bba9745c16e5","product":{"name":"Packetbeat","vendor":{"name":"Elastic"}},"product_version":"9.0.0 ≤9.1.8"}],"vulnerabilityVendor":[{"id":"ebf7414d-1233-3899-a211-2a6a6da6cfdf","vendor":{"name":"Elastic"}}]}}],"enisaIdAdvisory":[]}