Resource Exhaustion Vulnerability in Packetbeat by Elastic

CVE-2025-68388

What is CVE-2025-68388?

The vulnerability in Packetbeat arises from the improper allocation of resources which lacks limits or throttling. This weakness allows unauthenticated remote attackers to exploit the system by sending specially crafted IPv4 fragments, potentially causing excessive memory and CPU usage. The result is a denial-of-service condition that can disrupt normal operations and affect network monitoring capabilities, making this issue critical for users relying on Packetbeat for performance and security.

References