← Back

CVE-2025-68383

nvd nist
Published: Dec 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: security@elastic.co (Secondary)

Description

Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Dissect processor can allow a user to trigger a Buffer Overflow (CAPEC-100) and cause a denial of service (panic/crash) of the Filebeat process via either a malformed Syslog message or a malicious tokenizer pattern in the Dissect configuration.

Affected (4)

Products: Elastic: Filebeat
Elastic
1 product
Filebeat
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Elastic
Filebeat
From 7.0.0 to 7.17.29
Filebeat
From 8.0.0 to 8.19.9
Filebeat
From 9.0.0 to 9.1.9
Filebeat
From 9.2.0 to 9.2.3

Related CWEs

CWE-1284
Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (1)

Source: security@elastic.co
Vendor Advisory

Timeline

No history available yet.