CVE-2024-43709

An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.

Score

CVSS 3.1 7.5 High

Status

Modified - security@elastic.co

Published

2025-01-21

Last modified

2025-02-21

Weaknesses

CWE-770

Affected products

• Elasticsearch (Elastic)

References

• https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442
• https://security.netapp.com/advisory/ntap-20250221-0007/