UpHeron
All vulnerabilities

Servers and applications

CVE-2024-43709

An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.

Severity
High 7.5
Published
21 Jan 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
7.17.21, 8.13.3
Sources
NVD

Affected software

SoftwareAffected versions
ElasticsearchServers and applications · cpe:a:elastic:elasticsearch
  • From 7.17.0 before 7.17.21
  • From 8.0.0 before 8.13.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-43709
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-43709