CVE-2015-5377

CRITICAL severity · CVSS 9.8 · Injection

9.8CVSS CRITICAL

Summary

Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactHigh

Integrity impactHigh

Availability impactHigh

Exploit probability (EPSS)40%

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products we track (1)

Elasticsearch

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: https://github.com/elastic/elasticsearch/commit/bf3052d14c874aead7da8855c5fcadf5428a43f2 ↗

Additional information

NVD record
https://github.com/elastic/elasticsearch/commit/bf3052d14c874aead7da8855c5fcadf5428a43f2Patch
https://github.com/elastic/elasticsearch/commit/bf3052d14c874aead7da8855c5fcadf5428a43f2Patch
https://discuss.elastic.co/t/elasticsearch-remote-code-execution-cve-2015-5377/25736Advisory
https://discuss.elastic.co/t/elasticsearch-remote-code-execution-cve-2015-5377/25736Advisory
http://www.securityfocus.com/bid/75938Advisory
http://www.zerodayinitiative.com/advisories/ZDI-15-365/Advisory
http://www.securityfocus.com/bid/75938Advisory
http://www.zerodayinitiative.com/advisories/ZDI-15-365/Advisory