CVE-2022-23712: Improper Check for Unusual or Exceptional Conditions in Elasticsearch

June 7, 2022

A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request.

References

discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530
github.com/advisories/GHSA-wh6w-69xc-5rq5
nvd.nist.gov/vuln/detail/CVE-2022-23712
www.elastic.co/community/security/

Code Behaviors & Features

Detect and mitigate CVE-2022-23712 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →