UpHeron
All vulnerabilities

Servers and applications

CVE-2023-31418

An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering and we have no indication that the issue is known or that it is being exploited in the wild.

Severity
High 7.5
Published
26 Oct 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
ElasticsearchServers and applications · cpe:a:elastic:elasticsearch
  • Every version up to 7.17.12
  • From 8.0.0 up to 8.8.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-31418
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-31418