Advisory Database
  • Advisories
  • Dependency Scanning
  1. golang
  2. ›
  3. github.com/elastic/beats/v7
  4. ›
  5. CVE-2025-68383

CVE-2025-68383: Filebeat Beats has Buffer Overflow via Malformed Syslog Message or Malicious Tokenizer Pattern in Dissect Configuration

December 19, 2025

Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Dissect processor can allow a user to trigger a Buffer Overflow (CAPEC-100) and cause a denial of service (panic/crash) of the Filebeat process via either a malformed Syslog message or a malicious tokenizer pattern in the Dissect configuration.

References

  • discuss.elastic.co/t/filebeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-32/384180
  • github.com/advisories/GHSA-2mj3-6grc-px38
  • github.com/elastic/beats/commit/27a168fb1c598d4a16748e9a7382bc0d197335a5
  • github.com/elastic/beats/commit/2f971a057eea68e057b47829950cd8c26805df30
  • github.com/elastic/beats/commit/339fa3f887a14c91e0c955b50a3b8819393bd632
  • github.com/elastic/elasticsearch
  • nvd.nist.gov/vuln/detail/CVE-2025-68383

Code Behaviors & Features

Detect and mitigate CVE-2025-68383 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions starting from 7.7.0 before 8.19.9, all versions starting from 9.0.0 before 9.1.9, all versions starting from 9.2.0 before 9.2.3

Fixed versions

  • 8.19.9
  • 9.1.9
  • 9.2.3

Solution

Upgrade to versions 8.19.9, 9.1.9, 9.2.3 or above.

Impact 6.5 MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Learn more about CVSS

Weakness

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
  • CWE-1284: Improper Validation of Specified Quantity in Input

Source file

go/github.com/elastic/beats/v7/CVE-2025-68383.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:15:55 +0000.