Stack Overflow Vulnerability in Elasticsearch Affecting Nested GeometryCollection Objects

CVE-2024-52981

What is CVE-2024-52981?

A vulnerability has been identified in Elasticsearch that arises from excessive recursion when processing Well-KnownText formatted strings containing nested GeometryCollection objects. This flaw has the potential to trigger a stack overflow, leading to application crashes and service disruptions. Users of Elasticsearch are advised to review their configurations and update to the latest versions to mitigate the risks associated with this vulnerability.

References