GHSA-pw39-f3m5-cxfc

Elasticsearch Uncaught Exception leading to crash

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-23449

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.elasticsearch:elasticsearch	>= 8.4.0, < 8.11.1	8.11.1

Details

As written in the advisory (Markdown source, shown as plain text).

An uncaught exception in Elasticsearch >= 8.4.0 and < 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch ingest node that attempts to parse the PDF file will crash. This does not happen with password-protected PDF files or with unencrypted PDF files.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2024-23449 advisory
https://github.com/elastic/elasticsearch/commit/a59180459a3cb30b71399d778943cab4ac2191c4 web
https://github.com/elastic/elasticsearch/commit/f9bf18a716613473fc1cb96c838874e1f9f6ba22 web
https://discuss.elastic.co/t/elasticsearch-8-11-1-security-update-esa-2024-05/356458 web
https://github.com/elastic/elasticsearch package