Denial of Service Vulnerability in Packetbeat by Elastic

CVE-2017-11480

What is CVE-2017-11480?

Packetbeat, a lightweight network packet analyzer by Elastic, is susceptible to a denial of service flaw in its PostgreSQL protocol handler. When configured to monitor PostgreSQL traffic, if an attacker sends arbitrary network traffic to the designated monitored port, it can disrupt Packetbeat’s ability to accurately log legitimate PostgreSQL traffic, potentially leading to undetected issues in the database server. Users of Packetbeat versions prior to 5.6.4 should ensure they upgrade to mitigate this risk.

References