Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/elastic/beats(Go) | 8.6.0 | 8.19.9 | N/A |
| github.com/elastic/beats(Go) | 9.0.0 | 9.1.9 | N/A |
| github.com/elastic/beats(Go) | 9.2.0 | 9.2.3 | N/A |
| github.com/elastic/beats/v7(Go) | 0 | 7.0.0-alpha2.0.20251209162832-28cfc80d2f4e | N/A |
CVSS Metrics
