CyberRota Analysis
AI-GeneratedElasticsearch is vulnerable to a memory allocation issue that allows authenticated users with read-only privileges to submit specially crafted search requests, resulting in excessive memory allocation. This can lead to denial of service by exhausting the JVM heap and terminating the affected node. Organizations using Elasticsearch should prioritize addressing this vulnerability to prevent potential service disruptions.
Original NVD Description
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only read privileges on a single index can submit one small, specially crafted search request that causes an excessively large memory allocation, exhausting the JVM heap and terminating the affected node.