{"id":"GO-2025-4253","revision":"9ff79fa2ced54ca68dce0cff3bc7231b","records":[{"revision":"9ff79fa2ced54ca68dce0cff3bc7231b","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4253","aliases":["CVE-2025-68388","GHSA-fj69-23m4-ccvv"],"title":"Elasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 Fragments in github.com/elastic/beats","description":"Elasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 Fragments in github.com/elastic/beats","state":0,"publishedAt":"2026-01-23T02:28:11+00:00","modifiedAt":"2026-02-04T04:03:03.017114+00:00","affected":[{"ecosystem":"Go","name":"github.com/elastic/beats","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/elastic/beats/v7","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"7.0.0-alpha2.0.20251209162832-28cfc80d2f4e"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-fj69-23m4-ccvv","https://github.com/elastic/beats/commit/28cfc80d2f4e80bfd1c72eb3f849d777751ab870","https://discuss.elastic.co/t/packetbeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-29/384177"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4253","license":"OSV · upstream source license applies","key":"osv:GO-2025-4253","identifiers":["GO-2025-4253","CVE-2025-68388","GHSA-fj69-23m4-ccvv"]},"retained":false,"historicalAffected":[]}],"coverage":[]}