Out-of-Bounds Read Vulnerability in NFS Protocol Dissector by Elastic

CVE-2025-68382

What is CVE-2025-68382?

An out-of-bounds read vulnerability within the NFS protocol dissector in Elastic's Packetbeat allows an unauthenticated remote attacker to exploit buffer overflow conditions. This can lead to a denial-of-service event due to the program crashing while processing truncated XDR-encoded RPC messages. Users of affected versions should prioritize applying security updates to mitigate potential risks.

References